Activity
From 04/01/2023 to 04/30/2023
04/30/2023
-
11:55 PM pfSense Plus Bug #14329 (New): DDNS IPv6 update PHP error
- Dynamic DNS updates to DigitalOcean for IPv6 fail with a PHP error. This error appears in both the GUI's crash report...
-
08:50 PM pfSense Docs New Content #14309 (Pull Request Review): UDP Broadcast Relay package
- https://gitlab.netgate.com/docs/pfSense-docs/-/merge_requests/57
-
07:25 PM Todo #13508: Uncouple RAM Disk size from available kernel memory
- I set /tmp to 200000 on a small VM. It was accepted and rebooted. On boot I got this:
@ RAM disk creation failed. ... -
06:17 PM Regression #14322 (Feedback): CARP password is not being respected on 23.05 snapshots
- I've committed the fix upstream and cherry-picked it to our branches. This will be fixed in the next snapshots.
-
04:40 PM pfSense Packages Bug #14287: pfBlockerNG does not uninstall cleanly when using RAM disks
- 23.01 is the current stable release for my Netgate 3100
Version 23.01-RELEASE (arm)
built on Fri Feb 10 20:06:58... -
04:33 PM pfSense Docs Todo #14234 (Waiting on Merge): Update Packet Capture docs to reflect the new GUI
- Docs still need to be updated given the commit/MR was reverted with 38d3b819cfa131a94ae5b90b96e76c3b2e583fb9.
-
08:40 AM pfSense Packages Bug #14315: Routes are not exposed on Tailscale when an empty route entry exists in the GUI
- Tested on 23.01 and I can confirm that.
-
08:33 AM Bug #14325: Captive Portal incorrectly allows leading zeroes on voucher roll numbers
- I've tested on 23.01 and can confirm that.
-
03:45 AM Bug #14248: Static routes to monitor IP disappears if you set a gateway group as a default gateway.
- also unable to replicate this condition in multi-wan environment
-
03:10 AM Bug #13915: PHP errors when re-running Traffic Shaper Wizards with different settings
- not seeing any php errors so far when utilizing the traffic shaping wizard or manipulating bandwidth settings after i...
-
02:38 AM Bug #14328 (Duplicate): HA XMLRPC Sync between 1100s can cause errors with Virtual IP Sync
- Duplicate of #14034, already solved and in system patches.
-
01:17 AM Bug #14328: HA XMLRPC Sync between 1100s can cause errors with Virtual IP Sync
- Setup two 1100s with stock 23.01 and configured them with OPT as the SYNC port. Tested this and was unable to reprod...
-
01:00 AM Bug #14328 (Duplicate): HA XMLRPC Sync between 1100s can cause errors with Virtual IP Sync
- All XMLRPC sync options work fine until you choose "Virtual IP" and then the secondary will get the following crash r...
04/29/2023
-
10:32 PM pfSense Packages Bug #14287: pfBlockerNG does not uninstall cleanly when using RAM disks
- How did you arrive at 23.01, from a previous CE or Plus version?
I'm not able to reproduce this on a 23.01 Plus inst... -
07:21 PM pfSense Packages Bug #12705: IPsec Profile Wizard/Apple: IKEv2 VPN with ECDSA server certificate does not connect using generated profile
- Tested on the MacOS Monterey, Version 12.6.3.
I defined certs on pfSense using ECDSA instead of RSA. IPsec Authe... -
06:00 PM Regression #14327 (Resolved): Gateway popup in firewall rule list does not indicate current gateway status
- Hovering a Gateway Group, defined in a Firewall Rule, shows the gateways participating in the group. However, the gat...
-
04:06 PM pfSense Packages Bug #14326 (Rejected): RRD Summary 2.0_2 is not showing any data
- Tested on 22.01, 22.05 and 23.01 - all with RRD Summary version 2.0_2
During several weeks I tried but RRD Summary... -
04:03 PM pfSense Packages Bug #11563: BIND GUI writes TXT records > 255 characters
- It seems a bit outdated but I am currently working on a fix for that.
It just needs some testing.
https://github.com... -
03:16 PM pfSense Plus Feature #14308: Support for Ethernet (L2) filtering rules
- Tested on an ATT connection. 802.1X traffic passed with the new filtering rules perfectly and without incident. See...
-
03:13 PM pfSense Packages Todo #12865 (Resolved): RRD Summary improvements
- Tested on 23.01
I saw correct time period and interface names with 'OPTx' in brackets.
I marked this ToDo as ... -
03:11 PM Regression #12821: Intel e1000 driver (``em``, ``igb``) cannot pass packets tagged with VLAN ``0``
- I can confirm this issue is still present in 23.05. When testing the Ethernet filtering rules in 23.05, it was neces...
-
10:33 AM pfSense Packages Bug #13878 (Resolved): IPsec Profile Wizard/Apple: Generated profile does not contain the correct ``AuthenticationMethod`` for IKEv2 EAP configurations
-
10:33 AM pfSense Packages Bug #13878: IPsec Profile Wizard/Apple: Generated profile does not contain the correct ``AuthenticationMethod`` for IKEv2 EAP configurations
- Tested on: ...
-
07:12 AM Bug #14325 (Resolved): Captive Portal incorrectly allows leading zeroes on voucher roll numbers
- If you will create the Voucher roll with the number "000" or "0001" the system will allow you to create a such roll, ...
-
12:49 AM pfSense Plus Feature #14323 (Resolved): Print ZFS Boot Environment status in console menu banner
- Tested on...
04/28/2023
-
05:03 PM Regression #14322: CARP password is not being respected on 23.05 snapshots
- https://reviews.freebsd.org/D39874 has the fix(es). I'll give melifaro@ a few days to look at the netlink bits.
-
04:48 PM Regression #14322 (In Progress): CARP password is not being respected on 23.05 snapshots
- Kristof is looking into this. He says it's actually two separate problems (the password behavior, and printing out th...
-
01:08 PM Regression #14322 (Resolved): CARP password is not being respected on 23.05 snapshots
- On pfSense Plus 23.01, Plus 23.05 snapshots, and CE 2.7.0 snapshots, it appears that the CARP password is not being r...
-
04:46 PM Feature #13382: Packet Capture GUI with granular control
- Latest code looks better to me. I can filter using the top set of options and it doesn't grab more than I asked for.
... -
03:09 PM Feature #13382 (Feedback): Packet Capture GUI with granular control
- MRs merged, ready to be tested again.
-
03:16 PM pfSense Plus Feature #14323: Print ZFS Boot Environment status in console menu banner
- Updating subject for release notes.
-
02:53 PM pfSense Plus Feature #14323 (Resolved): Print ZFS Boot Environment status in console menu banner
-
03:14 PM Bug #13915: PHP errors when re-running Traffic Shaper Wizards with different settings
- Updating subject for release notes.
-
03:12 PM pfSense Plus Feature #14308: Support for Ethernet (L2) filtering rules
- Updating subject for release notes.
-
03:11 PM Bug #14035: PHP error when attempting to create a GIF interface when ``if_gif`` kernel module is not loaded
- Updating subject for release notes.
-
03:11 PM pfSense Packages Feature #14324 (New): pfBlockerNG to use geoLite "country" instead of "registered_country"
- Hello,
Explanations here: https://forum.netgate.com/topic/179567/country-vs-registered-country/4?_=1682682466761
... -
03:10 PM Bug #13014: Deadlock in Charon VICI interface
- Updating subject for release notes.
-
02:28 PM pfSense Packages Feature #11719: ACME - Create script for DNSExit API
- After a few years updating TXT records manually every 2 months I finally could (with the help of chat gpt) setup my c...
-
12:34 PM pfSense Packages Feature #14321 (Closed): Add UPS information to LCDproc screen
- Hi,
I'd like to add a new screen to LCDproc that reads the UPS information from NUT.
Should show the current U... -
12:34 PM pfSense Plus Regression #14320 (Feedback): ``ifconfig -a`` prints CARP information for interfaces that do not have CARP configured
- The fix has been pushed upstream and merged into our branched. It'll be in the next snapshots.
The issue was that ... -
06:50 AM Todo #14209: Update Time Zone data to 2023c or later
- Jim Pingle wrote in #note-2:
> Updating subject for release notes.
hi again,
as the release of 2.7 still taking ...
04/27/2023
-
09:26 PM Revision 43efba01: Use new utility function for ethertype, use correct operator, and remove redundant code. Fix #13382
-
09:17 PM Revision e8a7e86c: Expose new utility function to validate ethertype. redmine #14308
-
07:12 PM Revision 41b33b17: refactor is_module_loaded to first check by module name, then by file name
-
05:18 PM Bug #14055 (Resolved): Traffic shaped by limiters is dropped when routed to a GIF gateway
- Works on 23.05.a.20230427.0208, thanks!
-
05:11 PM Bug #14301: Input validation error when saving IGMP Proxy settings
- Jim Pingle wrote in #note-1:
> Can this be reproduced on 23.05? Are you sure this isn't the same problem as #13929 ?... -
04:48 PM Feature #13382 (Pull Request Review): Packet Capture GUI with granular control
- Thanks! https://gitlab.netgate.com/pfSense/pfSense/-/merge_requests/1032/diffs addresses that issue. This worked with...
-
02:40 PM Feature #13382 (New): Packet Capture GUI with granular control
- There seems to be an issue with the logic on the page now. If you only want to filter based on the top section of cus...
-
02:30 PM Revision d9fb30c4: Corrections for shaper wizards. Fixes #13915
- * Fix many inconsistencies in formatting between the wizards
* Fix a few potential bugs in both (changes made to one ... -
02:29 PM pfSense Plus Regression #14320: ``ifconfig -a`` prints CARP information for interfaces that do not have CARP configured
- Just to note, this only happens on 23.05 snapshots so it is likely related to unicast CARP changes.
-
02:28 PM pfSense Plus Regression #14320 (Resolved): ``ifconfig -a`` prints CARP information for interfaces that do not have CARP configured
- On a system with five interfaces configured, I have CARP VIPs on two of them (vtnet0, vtnet1) and yet @ifconfig -a@ p...
-
01:56 PM Revision fd30ce6a: refactor format_number and eliminate trailing space on unitless numbers
-
01:42 PM Bug #2218 (Confirmed): CARP VIPs can become master too early at boot time
-
12:21 PM pfSense Plus Bug #14319 (Rejected): PHP Fatal error bytes exhausted guiconfig.in
- Not enough information here for a valid bug report. This site is not for support or diagnostic discussion.
For ass... -
12:20 PM pfSense Plus Bug #14319 (Rejected): PHP Fatal error bytes exhausted guiconfig.in
- Crash report begins. Anonymous machine information:
amd64
14.0-CURRENT
FreeBSD 14.0-CURRENT #0 plus-RELENG_23_0... -
11:19 AM pfSense Plus Feature #14308 (Feedback): Support for Ethernet (L2) filtering rules
- MR was merged, it's in snapshots for testing.
-
10:52 AM Bug #14061 (Resolved): PHP error if a non-privileged shell user attempts an operation which needs to write ``config.cache``
-
10:36 AM Feature #13416: Change gateway monitoring actions default to "disabled"
- This seems like a good idea. The cost of running the gateway alarm event on a single WAN system far outweighs any ben...
-
10:28 AM pfSense Docs New Content #14318 (Resolved): Add docs for Unicast CARP (Plus only)
- Unicast CARP was added to Plus recently and needs documentation:
* New option on CARP VIP config to pick Multicast... -
10:16 AM pfSense Docs New Content #14317 (Resolved): Add docs for Ethernet Filtering (Plus Only)
- Ethernet/L2 filtering was added to Plus in #14308 and needs documentation.
A few notable items:
* Plus only fea... -
09:40 AM Bug #13915 (Feedback): PHP errors when re-running Traffic Shaper Wizards with different settings
- Applied in changeset commit:d9fb30c4179deccad54c8869537c93efd41b97aa.
-
07:32 AM Bug #13915 (In Progress): PHP errors when re-running Traffic Shaper Wizards with different settings
- Reviewing the files again this morning I spotted a couple potential problems still, will have a follow-up commit comi...
-
02:01 AM Bug #13915: PHP errors when re-running Traffic Shaper Wizards with different settings
- Jim Pingle wrote in #note-16:
> Will let this soak in snapshots over the weekend and if things are OK I'll look in... -
09:10 AM Regression #14316: Filter/NAT rules configured with "No XMLRPC Sync" enabled are still synchronized
- This applies in both 23.01 and 23.05.
-
08:31 AM Regression #14316 (Resolved): Filter/NAT rules configured with "No XMLRPC Sync" enabled are still synchronized
04/26/2023
-
10:05 PM Revision 04491654: Load if_gif if needed when creating a gif interface. Fixes #14035
-
07:44 PM Revision c966d0cc: PHP 8 fixes in Dedicated Links Shaper Wizard. Fixes #13915
- While here, clean up some formatting.
-
05:16 PM Revision 1c6665b0: PHP 8 fixes in Multi-All Shaper Wizard. Issue #13915
- While here, clean up some formatting.
-
05:15 PM Bug #14035 (Feedback): PHP error when attempting to create a GIF interface when ``if_gif`` kernel module is not loaded
- Applied in changeset commit:0449165411edfa1aaa37ca6f6dae5b9c56604c92.
-
12:33 PM Bug #14035 (Confirmed): PHP error when attempting to create a GIF interface when ``if_gif`` kernel module is not loaded
- This is closer but not enough, the module isn't automatically loaded when creating the GIF with pfSense_interface_cre...
-
01:12 AM Bug #14035 (Feedback): PHP error when attempting to create a GIF interface when ``if_gif`` kernel module is not loaded
- Since MODULES_OVERRIDE was fixed in crossbuild at on 3 March 2023, all modules are no longer being built and included...
-
05:12 PM pfSense Plus Regression #14137: pfSense Plus Upgrade repo data remains on the system after upgradng
- aleksei prokofiev wrote in #note-1:
> Also, if package manager unavailable, may help next solution
> Check and then... -
02:47 PM Bug #13915 (Feedback): PHP errors when re-running Traffic Shaper Wizards with different settings
- commit:c966d0cc68fde98c305ea48aee14c254b8cd207a addresses issues in the dedicated links wizard.
I did some light t... -
12:18 PM Bug #13915: PHP errors when re-running Traffic Shaper Wizards with different settings
- I just pushed commit:1c6665b003bc7ac9a7c558e5d93aa2f0dd774c18 which will show up shortly. It addresses the PHP issues...
-
09:41 AM Bug #13915 (In Progress): PHP errors when re-running Traffic Shaper Wizards with different settings
-
12:50 PM pfSense Packages Bug #14315 (Resolved): Routes are not exposed on Tailscale when an empty route entry exists in the GUI
- In the Tailscale package settings, if an empty entry exists for @Advertised Routes@, no routes will be exposed to the...
-
10:15 AM Bug #14055 (Feedback): Traffic shaped by limiters is dropped when routed to a GIF gateway
- I've pushed a slightly simplified version of this patch upstream and to our branched. This should be fixed in the nex...
-
07:32 AM pfSense Packages Feature #14311 (Rejected): Widget for System -> Patches
- Given the personal and custom nature of patches this is not viable. Not everyone will apply every patch, since not ev...
-
07:27 AM Feature #14310 (Duplicate): Policy test
- Duplicate of #2771
-
07:24 AM Bug #14313 (Feedback): Unable to create nested URL table aliases
- It's possible the docs are wrong. The nesting was added not too long ago (~1yr) and I recently updated the docs (#122...
-
05:22 AM Bug #14313 (Assigned): Unable to create nested URL table aliases
- In docs there is a phrase:
_"URL table aliases can nest other URL table aliases, and URL aliases can nest other URL ... -
07:02 AM Revision ddf9d1e1: Fix MSS clamping for IPsec IPv6 VPNs
- The definition of vpn_networks did not include the IPsec IPv6 pool.
Signed-off-by: Richard Laager <rlaager@wiktel.com> -
06:13 AM pfSense Packages Feature #14314 (Pull Request Review): Keep DDNS entries on config change
- Each time the BIND config is changed, all DDNS entries in all master zones are lost because the zone.db is overwritte...
-
03:46 AM Bug #13014 (Feedback): Deadlock in Charon VICI interface
- I've merged the fix to the relevant branches. It will be present in tomorrow's CE and plus snapshots.
-
02:09 AM Bug #14312: MSS clamping on VPN traffic does not work on IPsec IPv6 mobile VPNs
- https://github.com/pfsense/pfsense/pull/4634
-
02:09 AM Bug #14312 (Resolved): MSS clamping on VPN traffic does not work on IPsec IPv6 mobile VPNs
- Steps to reproduce:
1. Configure a mobile IPsec VPN with an IPv6 pool.
2. In System -> Advanced -> Firewall & NAT, ...
04/25/2023
-
05:39 PM pfSense Packages Feature #14311 (Rejected): Widget for System -> Patches
- I have the System_Patches package installed. There is no notification of updates.
It would be nice to have a notifi... -
05:23 PM Bug #14035 (Confirmed): PHP error when attempting to create a GIF interface when ``if_gif`` kernel module is not loaded
- I'm hitting this on a clean(ish) 23.05 armv7 install. Full log shows more errors:...
-
04:26 PM pfSense Plus Feature #14308 (Pull Request Review): Support for Ethernet (L2) filtering rules
- https://gitlab.netgate.com/pfSense/factory/-/merge_requests/102
-
12:27 PM pfSense Plus Feature #14308 (Resolved): Support for Ethernet (L2) filtering rules
-
03:25 PM Feature #14310 (Duplicate): Policy test
- Probably useful for those who have a lengthy ruleset.
Have a policy test rule option where an admin can put in a So... -
02:57 PM pfSense Docs Correction #13921 (Closed): OpenVPN Monitoring Docs need updated
- Done: https://gitlab.netgate.com/docs/pfSense-docs/-/commit/001d6d1bd85b1004ced30a5a0b28952cd38acf3e
-
12:34 PM pfSense Docs Correction #13921 (In Progress): OpenVPN Monitoring Docs need updated
-
02:37 PM Bug #13014: Deadlock in Charon VICI interface
- Hey Kristof, I have not had the issue recur at all. Seems like it's fixed to me! Thank you for keeping up with it.
-
11:54 AM Bug #13014: Deadlock in Charon VICI interface
- Hi David, did you see the issue recur? It'd be very nice to have confirmation so we can land this (and upstream stron...
-
02:19 PM Bug #14055 (In Progress): Traffic shaped by limiters is dropped when routed to a GIF gateway
-
01:40 PM Bug #14055: Traffic shaped by limiters is dropped when routed to a GIF gateway
- I've been able to reproduce it (with a floating rule so locally ordinated traffic hits the route-to rule).
The iss... -
12:51 PM pfSense Docs New Content #14309 (Closed): UDP Broadcast Relay package
- Add documentation for the new package UDP Broadcast Relay: https://redmine.pfsense.org/issues/10818
Reference: htt... -
12:45 PM pfSense Packages Bug #14287: pfBlockerNG does not uninstall cleanly when using RAM disks
- Correction, I applied the patch at https://redmine.pfsense.org/issues/14230 and it didn't help. I know it's a differ...
-
12:28 PM pfSense Docs New Content #13941 (Resolved): Memory usage in pfSense
- Looks great.
-
10:21 AM pfSense Plus Regression #14235 (Resolved): Undersized CESA TDMA descriptor pools can be exhausted, leading to errors
-
10:20 AM pfSense Plus Bug #14204 (Resolved): System Information Dashboard widget stops showing CPU details on aarch64
-
10:18 AM pfSense Plus Feature #14293 (Resolved): Package plugin hook for pf Ethernet rules
- Currently no consumers of this feature, but it's simple enough that it should work.
-
10:18 AM pfSense Plus Feature #13511 (Resolved): Priority Code Point (PCP) option on interface configuration
- This seems to work as expected.
-
10:17 AM pfSense Plus Bug #13348: Error when deleting ZFS Boot Environment created from duplicate of non-default entry
- Going to punt this to 23.09. Bigger fish to fry for 23.05 release.
-
09:48 AM pfSense Docs New Content #11714 (Closed): Add section about the correct addresses to use for failover peers when Troubleshooting High Availability DHCP Failover
- Added, along with another missing potential failure point (firewall rules): https://gitlab.netgate.com/docs/pfSense-d...
-
07:56 AM pfSense Docs New Content #12565 (Closed): Document new "Duplicate Connection Limit" option on OpenVPN server instances
- Added a while back: https://docs.netgate.com/pfsense/en/latest/vpn/openvpn/configure-server-tunnel.html#duplicate-con...
-
07:14 AM Bug #13003 (Feedback): Malicious Driver Detection event on ``ixl(4)`` driver
-
04:52 AM Bug #13003 (Ready To Test): Malicious Driver Detection event on ``ixl(4)`` driver
- As we've not been able to reproduce this issue the best we can do (and have done) for now is to disable the malicious...
04/24/2023
-
10:34 PM Regression #14305: Boot loader is not updated during upgrade from pfSense CE 2.6 to 2.7
- To work around the issue:
# After the first reboot when it fails to boot, use option 6 to boot with @kernel.old@
# ... -
08:03 PM Regression #14305: Boot loader is not updated during upgrade from pfSense CE 2.6 to 2.7
- Further testing:
* Issue occurs when updating from CE 2.6 to 2.7 (tested @2.7.0.a.20230424.0600@) using Gen2/UEFI.
... -
02:30 PM Regression #14305: Boot loader is not updated during upgrade from pfSense CE 2.6 to 2.7
- This appears to be a UEFI issue. Everything legacy I have tested upgraded OK but UEFI systems hang at the frame buffer.
-
10:50 AM Regression #14305 (Confirmed): Boot loader is not updated during upgrade from pfSense CE 2.6 to 2.7
- Reproduced on Windows 11 Hyper-V after upgrading a fresh Gen2 ZFS install of 2.6.
-
09:55 AM Regression #14305 (Resolved): Boot loader is not updated during upgrade from pfSense CE 2.6 to 2.7
- Trying to upgrade to 2.7dev from 2.6 results in a failed boot.
Appears to be kernel or driver related as hitting 6... -
09:10 PM pfSense Plus Bug #13875 (Duplicate): Boot after upgrade form 22.05 to 23.01 hangs
- This looks like the issue reported here which is fixed for 23.05: https://redmine.pfsense.org/issues/13895
-
05:30 PM pfSense Plus Bug #13875: Boot after upgrade form 22.05 to 23.01 hangs
- I'm also experiencing this issue @jimp. Host OS is Hyper-V 2022.
This post on reddit summarizes the issue exactl... -
07:34 PM pfSense Plus Regression #13895 (Feedback): Early boot hangs on Hyper-V with Gen2 VMs
-
07:26 PM pfSense Plus Regression #13895: Early boot hangs on Hyper-V with Gen2 VMs
- For reference:
Early boot hang fixes which resolve serial console issues in Azure/Hyper-V
https://github.com/pfsense... -
06:42 PM Bug #14031: Identical SMTP notifications repeat in an infinite loop under certain conditions
- Thanks. I submitted a PR that addresses the issue.
-
03:09 PM Bug #14031: Identical SMTP notifications repeat in an infinite loop under certain conditions
- How to properly send notifications from nut is not a topic for this Redmine. Feel free to discuss it more on the foru...
-
02:50 PM Bug #14031: Identical SMTP notifications repeat in an infinite loop under certain conditions
- Hmm... "the times it happened to work were purely by chance" seems quite a bit overstated. It seems to be rather the ...
-
10:39 AM Bug #14031: Identical SMTP notifications repeat in an infinite loop under certain conditions
- They absolutely *did not* work correctly (hence this bug). They failed in new/different ways on 23.01 but they also f...
-
10:32 AM Bug #14031: Identical SMTP notifications repeat in an infinite loop under certain conditions
- Given that non-root package notifications worked previously, I think users are going to perceive this as a regression...
-
07:26 AM Bug #14031: Identical SMTP notifications repeat in an infinite loop under certain conditions
- That's not a problem we can solve here. Somehow the unprivileged process would have to submit a message into the queu...
-
06:10 PM Bug #13915: PHP errors when re-running Traffic Shaper Wizards with different settings
- Thank you for whatever you can do - I hope this makes it into a Patch update soon, because I miss this feature dearly.
-
09:12 AM Bug #13915: PHP errors when re-running Traffic Shaper Wizards with different settings
- Looking at the code (traffic_shaper_wizard_multi_all.inc:773) and nearby if tests the various step numbers use:
<p... -
07:36 AM Bug #13915: PHP errors when re-running Traffic Shaper Wizards with different settings
- Also getting the same issue with a slight variation of the error.
Fatal error: Uncaught TypeError: Cannot access off... -
07:20 AM Bug #13915: PHP errors when re-running Traffic Shaper Wizards with different settings
- There are also similar errors in the dedicated links shaper wizard, not just the multiple lan/wan wizard. See duplica...
-
04:58 PM pfSense Packages Feature #10818 (Feedback): UDP Broadcast Relay
- The package is now available for dev snapshots (currently 23.05/2.7).
-
03:09 PM Todo #14307 (Resolved): Update miniupnpd to 2.3.3
- pfSense: @2.2.1_1,1@ (equivalent of @2.2.1@) https://github.com/pfsense/FreeBSD-ports/tree/devel/net/miniupnpd
Main:... -
03:06 PM Regression #14306: Pfsense CE 2.6.0 installation fails
- Jim Pingle wrote in #note-1:
> This is almost certainly an issue with your hardware EFI/BIOS and not a bug in pfSense... -
02:45 PM Regression #14306 (Not a Bug): Pfsense CE 2.6.0 installation fails
- This is almost certainly an issue with your hardware EFI/BIOS and not a bug in pfSense.
-
01:38 PM Regression #14306 (Not a Bug): Pfsense CE 2.6.0 installation fails
- Running the AMD64 USB Memstick installer with VGA console.
Performed a zfs guided install to a mirror on 1 m.2 sata... -
09:20 AM Todo #14304 (Rejected): please upgrade openvpn to 2.6.3
- That will happen naturally as we sync ports upstream for snapshots.
Past versions won't be updated. -
09:06 AM Todo #14304 (Rejected): please upgrade openvpn to 2.6.3
- https://www.freshports.org/security/openvpn
security/openvpn: bugfix update to v2.6.3
For security repairs, pleas... -
07:17 AM Bug #14303 (Duplicate): Error when trying to setup traffic shaping
- Duplicate of #13915
-
07:16 AM pfSense Packages Bug #14299: pfBlockerNG does not honor the cURL source interface setting for DNSBL lists
- This morning I noticed the following:...
-
07:16 AM Bug #14301 (Feedback): Input validation error when saving IGMP Proxy settings
- Can this be reproduced on 23.05? Are you sure this isn't the same problem as #13929 ?
-
07:12 AM pfSense Plus Regression #14300 (Duplicate): Re: ``mmcsd0`` controller timeout/system hang on 1100
- The previous issue (#14181) is closed because it's either solved on *23.05* or it's hardware. So either it's already ...
-
07:09 AM Todo #13959 (Resolved): Trim blank characters from static IP address fields on the Interface configuration page
04/23/2023
-
05:03 PM Bug #14288 (Pull Request Review): Setting system DNS servers can incorrectly modify routes for interface addresses
- https://gitlab.netgate.com/pfSense/pfSense/-/merge_requests/1029
This ignores route changes when the DNS IP addres... -
12:58 PM pfSense Packages Bug #14179: FreeRadius is active but in an inoperable state, switches to a generated freeradius-temp certificate upon restart
- Hi Chris,
thanks for looking into this.
Yes I upgraded from 2.6.0 and the original version was probably somethi... -
11:55 AM Bug #14031: Identical SMTP notifications repeat in an infinite loop under certain conditions
- Jim, I tested this patch and the end effect, at least for 23.01, is that non root notifications just silently fail.
... -
11:43 AM Bug #14303 (Duplicate): Error when trying to setup traffic shaping
- I'm trying to setup some traffic shaping but after going through the wizard I get the following error:
Fatal error... -
10:24 AM pfSense Packages Bug #14287: pfBlockerNG does not uninstall cleanly when using RAM disks
- Related https://redmine.pfsense.org/issues/13817
-
10:02 AM pfSense Packages Bug #14287: pfBlockerNG does not uninstall cleanly when using RAM disks
- Looks like a pfSense PHP 8 code issue.
{main} thrown in /etc/inc/config.lib.inc on line 928
PHP ERROR: Type: 1, Fi... -
08:50 AM pfSense Packages Bug #14287: pfBlockerNG does not uninstall cleanly when using RAM disks
- Note that System Patches 2.2.1 is installed with all recommended patches applied.
-
08:36 AM pfSense Packages Bug #14287: pfBlockerNG does not uninstall cleanly when using RAM disks
- Error when removing 3.2.0_4:...
-
10:22 AM Bug #14302 (Not a Bug): Automated Configuration Backup Failure
- Sometimes the server is not reachable due to maintenance, however that error indicates there was a temporary issue wi...
-
06:18 AM Bug #14302 (Not a Bug): Automated Configuration Backup Failure
- I am getting a message that my backup is failing to upload to the Netgate servers (which I have it set to do after ev...
04/22/2023
-
09:48 PM pfSense Packages Bug #14287: pfBlockerNG does not uninstall cleanly when using RAM disks
- If you update to the latest pfBlockerNG and then uninstall it with Keep Settings unchecked, does this still leave orp...
-
09:41 PM pfSense Plus Regression #14300: Re: ``mmcsd0`` controller timeout/system hang on 1100
- Typically these messages indicate eMMC controller or storage chip failure. It is unlikely to be a bug. Are you able...
-
08:22 PM pfSense Plus Regression #14300 (Duplicate): Re: ``mmcsd0`` controller timeout/system hang on 1100
- [the original issue is closed so I can no longer post to it!?!]
I'm still on 23.01, running my spare SG-1100, and ... -
09:31 PM Bug #14301 (Resolved): Input validation error when saving IGMP Proxy settings
- When attempting to add interfaces to IGMP Proxy or make any configuration changes, there is an error stating "There w...
-
09:07 PM pfSense Packages Bug #14179: FreeRadius is active but in an inoperable state, switches to a generated freeradius-temp certificate upon restart
- Steps taken to reproduce:
1. Install FreeRadius package into a virtual machine of 23.01
2. Configure FreeRadius with... -
07:59 PM pfSense Plus Feature #14295 (Resolved): Promiscuous Mode option on interface configuration
- Tested on...
-
05:53 PM Feature #13382: Packet Capture GUI with granular control
- 23.05.a.20230421.0022 packet capture has the updated interface with additional options but now also has the filter pr...
-
05:33 PM pfSense Packages Bug #13632: tailscale does not survive reboot on pfsense with ram disk in use
- tailscale v0.1.3 on 23.05.a.20230421.0022 in the package's settings provides a configurable field for state directory...
-
04:02 AM pfSense Packages Bug #13632: tailscale does not survive reboot on pfsense with ram disk in use
- The latest Tailscale version under available packages is 0.1.2.
v0.1.3 is not listed yet. Please check. -
03:58 PM Todo #13959: Trim blank characters from static IP address fields on the Interface configuration page
- Looks good on 23.05.a.20230421.0022 - adding space(s) on the leading or trailing end of static IPv6 address in interf...
-
05:38 AM pfSense Packages Bug #13936 (Resolved): PHP error from RRD Graphs when attempting a query a newly created empty database
- Tested against:...
-
04:38 AM pfSense Packages Bug #10900 (Not a Bug): /packages/backup/backup.php?a=download&t=backup HTTP 504, or Sends PHP Error Message as ASCII/Text file Named pfsense.bak.tgz
- The References.7z file initially included indicates that the issue was with allocated PHP memory. ...
-
04:17 AM pfSense Packages Bug #10936: both haproxy/haproxy-devel non-existent option lb-agent-chk
- haproxy 0.61_9
Still has the lb-agent-chk listed as the check method. The needs to be removed.
-
02:42 AM Bug #13655 (Resolved): DNS Forwarder (``dnsmasq``) is using an invalid combination of options when "Query DNS servers sequentially" is enabled
- Tested the patch against:...
-
01:37 AM pfSense Packages Bug #13985: Telegraf error After Update PFSense to 23.01
- @aleksei prokofiev, what dependent Telefraf Package have you?
-
01:18 AM pfSense Packages Bug #13985: Telegraf error After Update PFSense to 23.01
- Can't reproduce,
Installed 2.6 CE
Installed and configure Telegraf with influx DB
Upgraded to 23.01
no errors oc... -
12:27 AM pfSense Plus Feature #14297: Add Option for Vendor Class ID in DHCP Client
- With only option 60 there could be a caveat described here https://redmine.pfsense.org/issues/13279
You also need to...
04/21/2023
-
04:59 PM pfSense Plus Feature #14297: Add Option for Vendor Class ID in DHCP Client
- It is possible to do this already using the Send Options field in the advanced dhcp client options.
However a sepa... -
03:07 PM pfSense Plus Feature #14297 (New): Add Option for Vendor Class ID in DHCP Client
- Some ISPs require a Vendor Class ID be sent (option 60) when requesting DHCP. This can currently be accomplished in ...
-
04:20 PM pfSense Packages Bug #14299: pfBlockerNG does not honor the cURL source interface setting for DNSBL lists
- More details:
https://redmine.pfsense.org/issues/12882#change-59903
The cURL interface can be specified via the... -
04:02 PM pfSense Packages Bug #14299: pfBlockerNG does not honor the cURL source interface setting for DNSBL lists
- Pull request: https://github.com/pfsense/FreeBSD-ports/pull/1251
-
04:00 PM pfSense Packages Bug #14299 (Resolved): pfBlockerNG does not honor the cURL source interface setting for DNSBL lists
- Pull request to fix the problem is on its way.
-
03:09 PM pfSense Docs Todo #14298 (Closed): Add documentation for vendor-class-identifier
- If we add vendor-class-identifier to pfSense Plus's web interface like in #14297, we'll need documentation items adde...
-
02:41 PM Bug #14182 (Closed): PHP error when XMLRPC client attempts to synchronize without any synchronization settings in the configuration
- Those new errors wouldn't be related. Should we want to address those, they'd need to be in a separate issue for that...
-
12:50 PM Bug #14182: PHP error when XMLRPC client attempts to synchronize without any synchronization settings in the configuration
- tested on:
Version 23.01-RELEASE (amd64)
built on Fri Feb 10 20:06:33 UTC 2023
FreeBSD 14.0-CURRENT
unable to r... -
01:53 PM Revision 481e2b0d: Add pfSense-pkg-udpbroadcastrelay to poudriere_bulk
-
12:40 PM Bug #14296: 2.6 poor performance in hyper-v
- "it doesn't work how I expect" isn't sufficient for a bug report. The forum is the correct place to discuss issues li...
-
12:15 PM Bug #14296: 2.6 poor performance in hyper-v
- William Warren wrote:
> i instlaled pfsense in server 2022 hyper-v
> when using 2.6 performance is very poort..lik... -
12:13 PM Bug #14296 (Rejected): 2.6 poor performance in hyper-v
- This site is not for support or diagnostic discussion.
For assistance in solving problems, please post on the "Net... -
12:06 PM Bug #14296 (Rejected): 2.6 poor performance in hyper-v
- i instlaled pfsense in server 2022 hyper-v
when using 2.6 performance is very poort..like 5 meghabits out of 240 av... -
12:27 PM pfSense Plus Feature #14173: QAT driver does not attach to QAT virtual function devices passed through to VM on Xeon D-2146NT
- Thank you for responding.
I'm aware of the hardware you are selling. Now that the next generation of Atom and Xeon... -
11:06 AM pfSense Plus Feature #14173: QAT driver does not attach to QAT virtual function devices passed through to VM on Xeon D-2146NT
- We make sure that QAT works on hardware we sell: C3000, C2000, and the add-on CPIC cards in the Netgate shop. Support...
-
10:51 AM pfSense Plus Feature #14173: QAT driver does not attach to QAT virtual function devices passed through to VM on Xeon D-2146NT
- I was informed by Intel that there will be no QAT support in FreeBSD 14.0 for any chips other than those belonging to...
-
09:19 AM pfSense Plus Feature #14295 (Resolved): Promiscuous Mode option on interface configuration
-
06:38 AM pfSense Packages Bug #13985: Telegraf error After Update PFSense to 23.01
- I've tested on
23.01-RELEASE (amd64)
built on Fri Feb 10 20:06:33 UTC 2023
FreeBSD 14.0-CURRENT
I can't repro... -
03:55 AM Feature #14294 (Pull Request Review): Add option to disable update-optimization.
- Add option to DHCP / DHCPv6 to disable update optimization for DDNS.
If DNS Server is loosing DDNS entries, for ex...
04/20/2023
-
02:53 PM pfSense Plus Feature #13511: Priority Code Point (PCP) option on interface configuration
- Updating subject for release notes.
-
09:46 AM pfSense Plus Feature #13511 (Feedback): Priority Code Point (PCP) option on interface configuration
-
02:51 PM pfSense Plus Regression #14102: Console menu incorrectly shows option ``99`` on some ARMv7/ARM64 installations
- Updating subject for release notes.
-
08:12 AM pfSense Plus Regression #14102 (Resolved): Console menu incorrectly shows option ``99`` on some ARMv7/ARM64 installations
- After the latest Plus commit for this issue from Luiz (d470b17c454abb59f48846d361a260191655f1fe) it appears to be OK ...
-
11:27 AM pfSense Packages Bug #13985: Telegraf error After Update PFSense to 23.01
- New knowledge, have installed the community version virtually.
The Telegraf Package Dependencies are different.
Comm... -
11:11 AM pfSense Plus Feature #14293: Package plugin hook for pf Ethernet rules
- https://gitlab.netgate.com/pfSense/factory/-/commit/738ac108364a4abbcd2b6c918b34ff9e7511c7ca
-
11:10 AM pfSense Plus Feature #14293 (Resolved): Package plugin hook for pf Ethernet rules
- Packages can now add pf ether rules using the @<filter_rules_needed>package_rules</filter_rules_needed>@ mechanism.
... -
09:53 AM pfSense Plus Regression #14292 (Resolved): Status LEDs on the Netgate 1100 do not function properly
- The 1100 status LED is created with a different name after the DTS change in 23.01.
It is now @/dev/led/led2@ and ... -
09:51 AM pfSense Plus Feature #14291 (Closed): Support for cryptographic acceleration using the Multi-Buffer Crypto for IPsec Library (IPsec-MB, IIMB)
- The kernel module for the Intel® Multi-Buffer Crypto for IPsec Library (a.k.a. IPsec-MB or IIMB) has been added in th...
-
07:52 AM pfSense Plus Regression #14181 (Closed): ``mmcsd0`` controller timeout/system hang on 1100
- Another update after another 2 weeks on 23.05 with my 1100, still have yet to see another timeout. It was happening f...
-
06:14 AM Bug #14290 (Resolved): ICMPv6 Path MTU Discovery breaks with NPT
- I have the following setup:
Tunnel via HE.net
Internal Prefix on LAN: 2001:db8:1::1/64
Routed /48 from HE: 2001:...
04/19/2023
-
04:24 PM Feature #14289 (Resolved): Enable ``@`` support for name.com in Dynamic DNS
- Hello. I am on pfSense CE 2.6.0 and when I try to create or update a client record for the dynamic dns provider "name...
-
12:39 PM Revision d49f0945: Fix invalid pcap filters in some cases. Fixes #13382
-
10:56 AM pfSense Plus Feature #13511: Priority Code Point (PCP) option on interface configuration
- This is ready to land: https://gitlab.netgate.com/pfSense/factory/-/merge_requests/99
-
10:56 AM pfSense Plus Feature #13511 (Pull Request Review): Priority Code Point (PCP) option on interface configuration
-
08:09 AM Bug #14288: Setting system DNS servers can incorrectly modify routes for interface addresses
- This impacted quite a few users at the time. It should at least be documented. I would prefer to see a note on the Ge...
-
08:01 AM Bug #13014: Deadlock in Charon VICI interface
- Kristof Provost wrote in #note-48:
> I've built that patch in a package for 23.01. Can someone who's been seeing thi... -
07:45 AM Feature #13382 (Feedback): Packet Capture GUI with granular control
- Applied in changeset commit:d49f09459f3c317d4e32d2c5a42131f48b1ca68d.
-
07:39 AM Feature #13382 (Pull Request Review): Packet Capture GUI with granular control
-
06:22 AM Regression #14139 (Resolved): CARP announcement src MAC should be virtual MAC
- Tested against: ...
-
05:09 AM Bug #12079: Kernel panic when running IGMP Proxy: Sleeping thread owns a non-sleepable lock
- Hey Arturo,
thank you for your patience
I wrote a highly experimental patch to sort it out, I don't know yet if... -
03:26 AM Bug #12079: Kernel panic when running IGMP Proxy: Sleeping thread owns a non-sleepable lock
- Just had another hard crash. Had to reboot the system manually. Any news on this issue?
For the moment I have disab... -
05:06 AM Bug #14083: Adding MSS and MTU values on a LAGG VLAN interface breaks connectivity
- We had a customer complaining about similar behavior at Netgate 2100. However, I couldn't reproduce this behavior on ...
-
03:36 AM Regression #14283 (Resolved): Nothing is logged through ``syslog`` if the configuration contains an empty ``<syslogd>`` section or if that section is not present
- Tested the diff against:...
04/18/2023
-
08:05 PM Bug #14288: Setting system DNS servers can incorrectly modify routes for interface addresses
- Some related discussion:
https://forum.netgate.com/topic/162791/
The issue was introduced in 2.5.1 with https://redm... -
07:21 PM Bug #14288 (Resolved): Setting system DNS servers can incorrectly modify routes for interface addresses
- Tested on 23.01
Using an address on @lo0@ (e.g. a localhost VIP or simply @127.0.0.1) as a DNS sever under System ... -
08:03 PM Bug #12078: DNS Resolution Behavior does not consider named when setting localhost
- The following patch allows for the localhost DNS server to be added automatically when the DNS Resolution behavior is...
-
03:57 PM pfSense Packages Bug #13632: tailscale does not survive reboot on pfsense with ram disk in use
- And as promised:
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=270921 -
03:39 PM pfSense Packages Bug #13632 (Feedback): tailscale does not survive reboot on pfsense with ram disk in use
- @v0.1.3@ includes migration code that will move the state file from @/var/db/tailscale/tailscale.state@ to a location...
-
11:00 AM pfSense Packages Bug #13632 (In Progress): tailscale does not survive reboot on pfsense with ram disk in use
- Looking at this.
First I need to expose the --statedir tailscaled option to the rc script (and upstream it). I'm t... -
01:31 PM pfSense Docs Todo #14234 (Feedback): Update Packet Capture docs to reflect the new GUI
- I reorganized things a bit after merging the docs changes and filled in a little more info: https://gitlab.netgate.co...
-
12:56 PM pfSense Packages Bug #14287 (Resolved): pfBlockerNG does not uninstall cleanly when using RAM disks
- UNchecking "keep config" and then trying to remove the 3.2.0_3 package results in PHP error.
Other user reports th... -
12:45 PM Regression #14217: IPsec Phase 2 rekey failures with some PFS key groups
- Also working well here as well. Rekey happened on schedule and traffic continued to pass, where before it had failed:
-
12:16 PM Regression #14217 (Resolved): IPsec Phase 2 rekey failures with some PFS key groups
- Confirmed this is rekeying as expected using PFS key group 18 in todays CE snnapshot: 2.7.0.a.20230418.0600...
-
08:21 AM Bug #14285 (Bogus): Fatal trap 12: page fault while in kernel mode
- You are running a very old build. Please update.
-
05:13 AM Bug #14285 (Bogus): Fatal trap 12: page fault while in kernel mode
- Been using system for years and suddenly page fault error causing reboot it seems - during very low load/low traffic ...
-
04:53 AM Revision 4c8844e3: rc.carpmaster: remove openlog() call which changes php-fpm log facility
- In commit 0eae38cd2511e304c4660f8aeead751564f9dfc9, this call was added
alongside other changes to the rc.carpmaster ... -
04:25 AM Bug #14031: Identical SMTP notifications repeat in an infinite loop under certain conditions
- Tested on 23.01
I was able to reproduce this issue.
After applying c5faa351c1ef6d4555478a7f50b3a16ece7e0b2a, the iss...
04/17/2023
-
06:55 PM pfSense Packages Bug #11054: Check Client Certificate CN not working as described
- pfSense CE @2.6.0@
FreeRADIUS package version @0.15.7_33@
As of April 2023, I was able to recreate this issue on acc... -
06:19 PM Revision 11d14d62: Remove invalid syslog test. Fixes #14283
- Having an empty syslog config section is valid, as is not having a
section at all. We should always generate the conf... -
04:04 PM Feature #13382: Packet Capture GUI with granular control
- Alhusein Zawi wrote in #note-30:
> Is there way to keep/add the classic view of the packet capture ?
> in many case... -
08:55 AM Feature #13382 (Feedback): Packet Capture GUI with granular control
- Applied in changeset commit:0d9f5d520a886769bcbd8929db98e53a6623f569.
-
08:47 AM Feature #13382 (Pull Request Review): Packet Capture GUI with granular control
-
03:55 PM Bug #9353: PHPSession errors from limited access to dashboard and widgets
- This also happens when a session times out and the user tried to access a page which triggers the general "no permiss...
-
03:03 PM Bug #12747: Restarting the logging daemon during rotation also restarts ``sshguard``, leading to frequent log messages
- Unfortunately a lot of this is out of our control as we are at the mercy of what sshguard supports. Not saying we won...
-
02:55 PM Bug #12747: Restarting the logging daemon during rotation also restarts ``sshguard``, leading to frequent log messages
- Still an issue in 23.01. Suggestions:
1. Stop logging the stop and start. I can't see how this is useful.
2. Make ... -
02:55 PM pfSense Plus Bug #13497: unbound process looks like stuck periodically
- Yaroslav Semenenko wrote:
> Hello,
>
> I have Netgate 2100.
> Unbound service is needed to restart sometimes due... -
02:04 PM pfSense Packages Bug #14284 (Incomplete): Wen changing frontend type, there will be invissible leftovers, disturbing defining the new type
- During my trails to setup HA-proxy, I irregularly met a situation where I did not know which frontend type to use.
S... -
01:43 PM Regression #14283: Nothing is logged through ``syslog`` if the configuration contains an empty ``<syslogd>`` section or if that section is not present
- The code in this area is slightly different in plus which makes generating a patch more difficult. In the interest of...
-
01:30 PM Regression #14283 (Feedback): Nothing is logged through ``syslog`` if the configuration contains an empty ``<syslogd>`` section or if that section is not present
- Applied in changeset commit:11d14d628f333ed9b856a68630bfffa635de44f4.
-
11:14 AM Regression #14283: Nothing is logged through ``syslog`` if the configuration contains an empty ``<syslogd>`` section or if that section is not present
- In source:src/etc/inc/syslog.inc#L216 it checks for an empty syslog section which isn't really a valid test. Before t...
-
10:56 AM Regression #14283 (Resolved): Nothing is logged through ``syslog`` if the configuration contains an empty ``<syslogd>`` section or if that section is not present
- /var/etc/syslog.d empty. Nothing is being logged to /var/log files.
Possibly related to #13446 src/etc/inc/syslog.... -
10:44 AM pfSense Plus Regression #14235: Undersized CESA TDMA descriptor pools can be exhausted, leading to errors
- Updating subject for release notes.
-
10:40 AM Todo #14209: Update Time Zone data to 2023c or later
- Updating subject for release notes.
-
10:39 AM Bug #14182: PHP error when XMLRPC client attempts to synchronize without any synchronization settings in the configuration
- Updating subject for release notes.
-
10:38 AM Bug #14034: PHP errors in ``xmlrpc.php`` during configuration synchronization if the target host has an empty XML tag for a given section
- Updating subject for release notes.
-
10:37 AM Feature #14050: Support for ``iwlwifi`` wireless interfaces
- Updating subject for release notes.
-
10:36 AM Todo #13702: Replace direct config accesses in ``system_advanced_sysctl``
- Updating subject for release notes.
-
10:35 AM Todo #13701: Replace direct config accesses for the rest of the paths in ``system_advanced_admin.inc``
- Updating subject for release notes.
-
10:35 AM Bug #13908: Firewall rules are not reloaded when removing a VIP, outdated rules/entries remain active
- Updating subject for release notes.
-
10:34 AM Bug #14045: ``pfSense-boot`` can fail to copy the EFI bootloader
- Updating subject for release notes.
-
10:32 AM Regression #13942: PHP error on ``status_logs_settings.php`` if the configuration contains an empty ``syslog`` section
- Updating subject for release notes.
-
10:31 AM Todo #14250: Update firewall host and domain fields in the Setup Wizard to match the description and warning text from ``system.php``
- Updating subject for release notes.
-
10:29 AM Bug #14136: Services Status page and Dashboard widget do not list the ``radvd`` service with certain static IPv6 configurations
- Updating subject for release notes.
-
10:27 AM Todo #14098: Match upstream changes in PF syntax to disable fragment disassembly
- Updating subject for release notes.
-
10:23 AM Regression #13962: PPP interfaces do not request DNS servers when "DNS Server Override" is enabled
- Updating subject for release notes.
-
10:22 AM Bug #14061: PHP error if a non-privileged shell user attempts an operation which needs to write ``config.cache``
- Updating subject for release notes.
-
10:20 AM Todo #14027: Update PHP to 8.2.6
- Updating subject for release notes.
-
10:20 AM Regression #14016: FreeBSD default ``cron`` jobs are enabled when they should be disabled
- Updating subject for release notes.
-
10:19 AM Bug #12947: Old IPv6 addresses may continue to be used after DHCP or RA changes
- Jim Pingle wrote in #note-15:
> Still waiting on feedback from someone who can reproduce this to test against a 2.7.... -
09:19 AM Bug #12947: Old IPv6 addresses may continue to be used after DHCP or RA changes
- Still waiting on feedback from someone who can reproduce this to test against a 2.7.0 snap, 23.01 release, or a 23.05...
-
10:19 AM Regression #13963: OpenVPN and GIF interface create/destroy operations fail due to outdated ``linker.hints``
- Updating subject for release notes.
-
09:13 AM Regression #13963 (Resolved): OpenVPN and GIF interface create/destroy operations fail due to outdated ``linker.hints``
- This change is working well, numerous confirmations on the forum that it fixed the problem after applying it from the...
-
10:17 AM Todo #14183: Update OpenVPN Wizard to match current certificate and OpenVPN options
- Updating subject for release notes.
-
10:15 AM Bug #13973: PHP error in ``gwlb.inc`` when OpenVPN or IPsec instances referred to by assigned interface entries are missing
- Updating subject for release notes.
-
10:12 AM Regression #13350: SSL/TLS OpenVPN Client fails with ``ifconfig`` error when the IPv4 Tunnel Network is defined
- Updating subject for release notes.
-
10:11 AM Bug #14036: PHP error when the ``timeserver`` section of the configuration is empty
- Updating subject for release notes.
-
10:10 AM Bug #14033: PHP error in NTP Server if the configuration contains a partial section of old ``openntpd`` settings
- Updating subject for release notes.
-
08:29 AM Bug #14033 (Resolved): PHP error in NTP Server if the configuration contains a partial section of old ``openntpd`` settings
-
10:08 AM Regression #13999 (Resolved): PHP error in NTP widget and status with GPS data
- No crashes on current snapshots with a GPS-enabled NTP config. Both widget and status page show GPS data and link to ...
-
10:06 AM Feature #12464: Option to control log level of authentication messages in system logs ("Emergency" vs "Notice" level)
- Updating subject for release notes.
-
04:08 AM Feature #12464 (Resolved): Option to control log level of authentication messages in system logs ("Emergency" vs "Notice" level)
- Tested on 22.05 (built on Fri Apr 07 01:20:44 UTC 2023).
There is 'GUI login messages' option available in /System... -
10:03 AM Todo #13959: Trim blank characters from static IP address fields on the Interface configuration page
- Updating subject for release notes.
-
10:01 AM Todo #13492: Start ``rtsold`` immediately after ``dhcp6c`` sends a request
- Updating subject for release notes.
-
10:01 AM Bug #13939: IPv6 does not work on secondary PPPoE WAN
- Updating subject for release notes.
-
10:00 AM pfSense Plus Regression #13993: Switch ports on 7100/1100/2100 do not have Auto MDI-X support enabled
- Updating subject for release notes.
-
09:50 AM Feature #14255: Support for Intel PCH temperature values in thermal sensors
- Updating subject for release notes.
-
09:49 AM Bug #14176: Uptime displays plural seconds for multiple minutes in the System Information Dashboard widget
- Updating subject for release notes.
-
09:49 AM pfSense Plus Bug #14204: System Information Dashboard widget stops showing CPU details on aarch64
- Updating subject for release notes.
-
09:48 AM Bug #14115: DHCP Server page does not properly select a default interface tab if neither WAN nor LAN are capable of being DHCP servers
- Updating subject for release notes.
-
09:47 AM Regression #13983: Multiple PHP errors in the DHCP Server when the configuration contains an empty section for an interface
- Updating subject for release notes.
-
09:46 AM Todo #14188: Add note to inform the user that the "Next Certificate Serial" value is ignored when the "Randomize Serial" option is enabled
- Updating subject for release notes.
-
09:44 AM Bug #14124: Some blank SAN fields are not ignored when creating a certificate
- Updating subject for release notes.
-
09:43 AM Regression #14076: PHP error if the configuration has an empty Auto Configuration Backup section
- Updating subject for release notes.
-
09:42 AM Feature #14002: Option to enable/disable console bell, enabled by default
- Changing this to a feature request. Even though it started as a way to address a regression, the change involved is a...
-
09:29 AM Regression #14217 (Feedback): IPsec Phase 2 rekey failures with some PFS key groups
-
09:26 AM Regression #14217 (Ready To Test): IPsec Phase 2 rekey failures with some PFS key groups
- Confirmed fixed with that change.
It'll be in the next CE and plus snapshots. -
08:13 AM Regression #14217: IPsec Phase 2 rekey failures with some PFS key groups
- After a bit more digging I found that openssl_kdf.c's set_params() fails to set the salt with EVP_PKEY_CTX_add1_hkdf_...
-
03:54 AM Regression #14217: IPsec Phase 2 rekey failures with some PFS key groups
- I've started poking at this, and have been able to reproduce it. It still occurs on strongswan-5.9.10.
I've also d... -
09:18 AM Todo #14186 (Resolved): Improve DynDNS help text readability
- If you can't patch it with that one alone there is likely some other change that needs applied first. There were seve...
-
09:14 AM Bug #14031 (Resolved): Identical SMTP notifications repeat in an infinite loop under certain conditions
- All signs point to this being solved. After patching, there have been no repeats.
-
09:14 AM Todo #14011 (Resolved): Update memory graphs to account for changes in memory reporting
- This all appears to be working as expected. It's also available in the system patches package and people have been ru...
-
08:32 AM Bug #14278 (Rejected): pfsense Installation Documentation USB drive missing option
- It's not clear what you mean here. What are you expecting to see that you don't see? There is no document for install...
-
08:28 AM Bug #14277: Fatal error while restarting Unbound through SSH
- A little follow-up here. The only way I can induce an error is to try running that command as a user without sufficie...
-
03:43 AM Bug #14237: Intermittent packet loss related to DHCP with Multi-WAN
- Uploading packet capture on ports 67 and 68 on WAN2 interface, pfSense reported 0.12% packet loss during 11:31:00 and...
-
03:32 AM Revision 0d9f5d52: Additional changes to new Packet Capture GUI. Implements #13382
04/16/2023
-
03:52 PM Bug #14278 (Rejected): pfsense Installation Documentation USB drive missing option
- The pfsense documentation for installation on a USB drive is missing the option to select after rebooting without the...
-
03:21 PM Todo #14011: Update memory graphs to account for changes in memory reporting
- OK cool.
-
11:47 AM pfSense Packages Bug #14153: default whitelist is not created
- I was using pfBlockerNG-devel 3.2.0_3 but upgraded to pfBlockerNG-devel 3.2.0_4 and then checked my findings.
h2. ... -
10:20 AM pfSense Packages Bug #14179: FreeRadius is active but in an inoperable state, switches to a generated freeradius-temp certificate upon restart
- So after reading through the source code I found something that I thought was strange to even exist:...
-
09:46 AM pfSense Packages Bug #14179: FreeRadius is active but in an inoperable state, switches to a generated freeradius-temp certificate upon restart
- Okay, now I've run into it again and discovered the following:
If the firewall has internet connectivity during co... -
05:51 AM pfSense Plus Bug #13975: when assigning a vlan to wan interface configured mac address is not used
- Hi Chris,
I've opened two tac cases (as I have a primary fw as a whitebox, and the sg-3100 as backup). I did a rec... -
04:07 AM pfSense Packages Feature #14196: permitted firewall rules - additional text
* *Based on the text above this line, this is simply moving the rules from the one interface to a floating rule for...-
03:17 AM pfSense Packages Bug #11797: Traffic Totals lost upon reboot when using a ramdisk for /var and /tmp
- I'm experiencing this as well in pfSense @2.6.0 CE@ and Status_Traffic_Totals @2.3.2_2@ as of April 2023. Upon reboo...
04/15/2023
-
10:30 PM pfSense Packages Bug #14021: Squid ClamAV showing bytecode errors for version 334
- This has resolved on its own and updates again.
-
10:29 PM pfSense Plus Bug #14106: arc4random: WARNING: initial seeding bypassed the cryptographic random device because it was not yet seeded and the knob 'bypass_before_seeding' was enabled.
- Nothing has occurred that I can see. Tubi steaming service is having issues but that is not related.
-
09:27 PM pfSense Plus Bug #14106: arc4random: WARNING: initial seeding bypassed the cryptographic random device because it was not yet seeded and the knob 'bypass_before_seeding' was enabled.
- Warning message appears to be expected. Do you have any issues as a result of this message?
-
10:27 PM Bug #14033: PHP error in NTP Server if the configuration contains a partial section of old ``openntpd`` settings
- no issues using or configuring NTP on aarch64 running 23.05.a.20230407.0116
-
09:22 PM Bug #14237: Intermittent packet loss related to DHCP with Multi-WAN
- What does a packet capture on a WAN interface with a failed DHCP lease renewal look like?
This redmine is very v... -
09:15 PM pfSense Packages Bug #10692: PIMD starts twice at boot
- double starting again with pfSense Plus 23.05.a.20230414.0600 and PIMD 0.0.3_6, at least it's self aware...
-
09:14 PM pfSense Packages Feature #14196 (Incomplete): permitted firewall rules - additional text
- Based on the text above this line, this is simply moving the rules from the one interface to a floating rule for mult...
-
09:12 PM Todo #14250 (Resolved): Update firewall host and domain fields in the Setup Wizard to match the description and warning text from ``system.php``
-
08:49 PM Todo #14250: Update firewall host and domain fields in the Setup Wizard to match the description and warning text from ``system.php``
- this appears in the wizard now as expected - tested on 23.05.a.20230414.0600
!clipboard-202304152048-8hd6j.png!
-
09:12 PM pfSense Packages Bug #14153: default whitelist is not created
- What version of pfBlocker are you using?
I'm unable to reproduce this with a fresh install of pfBlockerNG-devel 3.... -
09:11 PM pfSense Packages Bug #14230: PHP error with pfBlockerNG
- I'm not seeing any PHP errors in 3.2.0_4 of pfBlockerNG. Was there any particular steps to reproduce this problem?
-
08:39 PM Bug #14270: Default domain is not used in IPsec Split DNS
- Tested on 23.01 as well. Can confirm that the checkbox unchecks itself when left blank and the option is not set in ...
-
07:56 PM pfSense Packages Bug #14228 (Resolved): pfBlockerNG might not support new Maxmind license keys
-
07:56 PM pfSense Packages Bug #14228: pfBlockerNG might not support new Maxmind license keys
- Closing this out since 3.2.0_4 is now available in System > Package Manager.
-
06:05 PM pfSense Packages Bug #14275: Deleting a route map that is assigned to an active neighbor causes crash
it shows an error if the route map was deleted..
the configuration shows the route map is not deleted while it w...-
03:49 PM Bug #9577: radvd send_ra_forall failed on interface / can't join ipv6-allrouters
- Can this issue be reopened since it has reappeared in 2.6.0?
FWIW, I saw the same issue appeared in OPNsense, wher... -
01:56 PM Feature #13382: Packet Capture GUI with granular control
Is there way to keep/add the classic view of the packet capture ?
in many cases I need to start a quick pcap by se...-
11:36 AM pfSense Packages Bug #14218 (Resolved): Deleting a shellcmd entry results in a PHP error and crash report
- Tested against:...
-
10:04 AM pfSense Plus Bug #13975 (Not a Bug): when assigning a vlan to wan interface configured mac address is not used
- I'm unable e to reproduce this. Steps taken:
1. Flash a 3100 with a new installation of 22.05
2. Noted original W... -
09:45 AM Bug #14277 (Duplicate): Fatal error while restarting Unbound through SSH
- The top couple lines there are the same PHP error from the other issue, so let's keep the discussion over there since...
-
02:20 AM Bug #14277 (Duplicate): Fatal error while restarting Unbound through SSH
- High CPU usage and issues with DNS resolver.
Applied - c5faa351c1ef6d4555478a7f50b3a16ece7e0b2a BUG #14061
SS... -
09:39 AM Bug #13573 (Resolved): DHCP Server generates an invalid configuration for static mappings when defining network booting and UEFI HTTPBoot URL
-
12:35 AM Bug #13573: DHCP Server generates an invalid configuration for static mappings when defining network booting and UEFI HTTPBoot URL
- Able to reproduce on ...
-
09:31 AM pfSense Packages Bug #11797 (Confirmed): Traffic Totals lost upon reboot when using a ramdisk for /var and /tmp
-
04:25 AM Bug #14236 (Resolved): PHP Error when viewing Traffic Graphs in ``iftop`` mode
- I couldn't reproduce it too. But according to the forum, it's fixed.
I am marking this ticket resolved.
-
03:05 AM Regression #14120 (Resolved): ``syslogd`` tries to bind interfaces with no IP address
- The patch fixes this behavior.
The syslogd starts even if there is no IP on the defined source interface. In that...
04/14/2023
-
06:57 PM pfSense Packages Bug #13654: Wireguard does not fail back failover WAN setup.
- Still has this problem. Are there any progress on this?
-
05:18 PM Bug #14256 (Resolved): PHP Error performing IPv6 ``ip_in_subnet()`` when passing a host addresses within prefix
-
04:48 PM Bug #14256: PHP Error performing IPv6 ``ip_in_subnet()`` when passing a host addresses within prefix
- I used modified file in 2.7.0, also in 23.01 version and all is fine now. No more PHP error. thank you!
-
03:41 PM pfSense Plus Bug #13497: unbound process looks like stuck periodically
- I use the Netgate 1100 with 23.01-RELEASE and can second that unbound from time to time stuck. Only restart the servi...
-
03:22 PM Revision e5e1e8f9: Fix DHCP HTTPBoot w/static maps. Fixes #13573
-
03:17 PM pfSense Packages Bug #14075 (Not a Bug): Using the ``Transparent ClientIP`` option in HAproxy results in kernel panics
-
03:17 PM Bug #13938 (Resolved): Kernel panic accessing the GUI over IPsec in certain environments when using nginx ``sendfile`` with unmapped mbufs
- kern.ipc.mb_use_ext_pgs has been disabled for 2 weeks now.
Marking as resolved. -
03:15 PM pfSense Packages Bug #14058 (Resolved): Update vendor=on triggers installation failure
-
03:14 PM Feature #12982 (Rejected): Add support for RFC7499 in RADIUS library.
- RFC7499 is experimental. Thus, it is unlikely we will support RFC7499.
-
02:32 PM Revision 0ba1a7ec: Fix handling of OpenVPN client TN. Fixes #13350
- * ifconfig format was incorrect for certain mode combinations, leading
to OpenVPN failing to start.
* Changed wordi... -
12:39 PM Bug #14115 (Resolved): DHCP Server page does not properly select a default interface tab if neither WAN nor LAN are capable of being DHCP servers
-
12:24 PM Bug #14115: DHCP Server page does not properly select a default interface tab if neither WAN nor LAN are capable of being DHCP servers
- tested on:
Version 23.01-RELEASE (amd64)
built on Fri Feb 10 20:06:33 UTC 2023
FreeBSD 14.0-CURRENT
patch fixes... -
12:00 PM Regression #13350 (Resolved): SSL/TLS OpenVPN Client fails with ``ifconfig`` error when the IPv4 Tunnel Network is defined
-
11:59 AM Regression #13350: SSL/TLS OpenVPN Client fails with ``ifconfig`` error when the IPv4 Tunnel Network is defined
- tested on:
Version 23.01-RELEASE (amd64)
built on Fri Feb 10 20:06:33 UTC 2023
FreeBSD 14.0-CURRENT
patch fixes... -
09:52 AM Regression #13350: SSL/TLS OpenVPN Client fails with ``ifconfig`` error when the IPv4 Tunnel Network is defined
- When testing I checked a variety of different mode/TN combinations and they all had the correct syntax now, for examp...
-
09:40 AM Regression #13350 (Feedback): SSL/TLS OpenVPN Client fails with ``ifconfig`` error when the IPv4 Tunnel Network is defined
- Applied in changeset commit:0ba1a7ec7871f8f6bd240a08f238a2fb1ecba16b.
-
08:17 AM Regression #13350 (In Progress): SSL/TLS OpenVPN Client fails with ``ifconfig`` error when the IPv4 Tunnel Network is defined
-
11:04 AM Bug #13573: DHCP Server generates an invalid configuration for static mappings when defining network booting and UEFI HTTPBoot URL
- I added a custom system patch with this and it works for me. Thank you!
-
10:30 AM Bug #13573 (Feedback): DHCP Server generates an invalid configuration for static mappings when defining network booting and UEFI HTTPBoot URL
- Applied in changeset commit:e5e1e8f9c498e1e5094394a049bb62d09ec8e034.
-
10:27 AM Bug #13573: DHCP Server generates an invalid configuration for static mappings when defining network booting and UEFI HTTPBoot URL
- So not only was this breaking HTTPBoot in general with static mappings, but it also was preventing that option from b...
-
10:20 AM Bug #13573 (In Progress): DHCP Server generates an invalid configuration for static mappings when defining network booting and UEFI HTTPBoot URL
- I was able to replicate this from a stock config with just three changes:
* Network booting checked
* HTTPBoot UR... -
10:10 AM Bug #13554 (Duplicate): Configuration file error caused by setting UEFI HTTPBoot URL in DHCP Service
- Duplicate of #13573
-
02:17 AM Regression #14267 (Resolved): PHP error when saving an ICMP firewall rule with no subtypes selected
- The patch fixes it.
I tested the patch against the following release:...
04/13/2023
-
04:02 PM Revision 3019cad0: Add plugin hook for nginx conf. Implements #13054
- * Plugin hook is called once for entries to be placed below locations in
the main GUI server, and a second time for... -
03:26 PM Bug #14276: One.com dynamic DNS doesn't work
- Sure, pull request has been created here now: https://github.com/pfsense/pfsense/pull/4632
While creating it I notic... -
02:20 PM Bug #14276: One.com dynamic DNS doesn't work
- Can you submit that change as a pull request on Github?
https://docs.netgate.com/pfsense/en/latest/development/pul... -
01:32 PM Bug #14276: One.com dynamic DNS doesn't work
- By the way there are some more notes about what issues I fixed and how I went about it in this thread but the patch a...
-
01:25 PM Bug #14276 (Pull Request Review): One.com dynamic DNS doesn't work
- I registered a domain on One.com yesterday and later found out that the Dynamic DNS updater for it in pfSense doesn't...
-
03:21 PM Todo #14027: Update PHP to 8.2.6
- PHP 8.2.5 has been released, but we will stay at 8.2.4 this close to release
8.2.5 merge will happen after we branch... -
02:50 PM Regression #13350: SSL/TLS OpenVPN Client fails with ``ifconfig`` error when the IPv4 Tunnel Network is defined
- When adding a tunnel network it makes a couple changes to the config, notably it *removes* the @pull@ directive, it a...
-
11:25 AM Bug #13014: Deadlock in Charon VICI interface
- The nice people at the Strongswan project think they know what the problem is, and have posted an experimental patch....
-
11:18 AM Bug #13908 (Resolved): Firewall rules are not reloaded when removing a VIP, outdated rules/entries remain active
- The patch fixes it.
Tested against:... -
11:10 AM Feature #13054 (Feedback): Package plugin hook for web server configuration stanzas
- Applied in changeset commit:3019cad09231b105f955d161a6e24d98d3623b71.
-
11:07 AM Feature #13054: Package plugin hook for web server configuration stanzas
- Implementation is as described in the issue description. The plugin can be defined in a package as in the following e...
-
06:36 AM pfSense Packages Bug #14275 (Resolved): Deleting a route map that is assigned to an active neighbor causes crash
- Steps to reproduce:
2.7.0.a.20230405.0015 / FRR 7.5.1.
1) Establish BGP session to a neighbor and announce a p... -
04:42 AM Feature #14274 (New): Android App by adding a couple of lines of code - Sort off
- Because pfSense GUI is mobile responsive you can use a mobile to perform actions in the GUI which is nice but a few p...
04/12/2023
-
08:37 PM Regression #14091: The "Kill States" button does not work consistently
- I'll take this one. I'm quite familiar with the module after porting it to PHP8.
-
09:27 AM Regression #14091: The "Kill States" button does not work consistently
- Tried this again since some changes went into the module overnight. If I filter and try to kill a subnet style string...
-
08:06 PM Revision b63b534c: remove dhcpleases6 from base install
-
07:57 PM Bug #14273: Traffic to a VIP is not port forwarding TCP or UDP
- I will re-verify my findings on Sunday... both the end user system and the lab one I had here failed but every other ...
-
06:05 PM Bug #14273 (New): Traffic to a VIP is not port forwarding TCP or UDP
- When there is a VIP on an interface (CARP, IP Alias) the traffic comes in to the interface no problem but if it is to...
-
07:38 PM Revision 53dbfb25: Fix default DHCP server if selection. Fixes #14115
-
07:15 PM Revision 3dfbc1fa: Safety belt check for CP used mac db content. Fixes #14172
-
07:09 PM Revision 7fb2954d: Don't sync if settings are empty. Fixes #14182
- 06:59 PM Revision 40eb0d51: Add user limits pchtherm data. Implements #14255
-
03:19 PM Revision f48271e0: dnsmasq strict order/all servers are mutually exclusive. Fixes #13655
-
03:07 PM Revision e90ba648: Automatic CARP/VIP rule refinements. Fixes #13908
- * Perform a filter reload after deleting a VIP. This is important not
only for CARP but other VIPs, since they may ... -
02:56 PM Feature #13054 (In Progress): Package plugin hook for web server configuration stanzas
-
02:45 PM Bug #14115 (Feedback): DHCP Server page does not properly select a default interface tab if neither WAN nor LAN are capable of being DHCP servers
- Applied in changeset commit:53dbfb25ff1a611806f81f39a6fd8b5b9938f175.
-
02:25 PM Regression #14172 (Feedback): PHP error in Captive Portal if ``usedmacs`` list is empty
- Applied in changeset commit:3dfbc1fa812b2131b11c176ce22de9b2d8d233ea.
-
02:20 PM Bug #14182 (Feedback): PHP error when XMLRPC client attempts to synchronize without any synchronization settings in the configuration
- Applied in changeset commit:7fb2954dce0c7732a34681d31723f4f5fe58f7c5.
-
02:05 PM Feature #14255 (Feedback): Support for Intel PCH temperature values in thermal sensors
- Applied in changeset commit:40eb0d510305bc8cdba81f80bd81ade3c8045db3.
-
07:53 AM Feature #14255 (Pull Request Review): Support for Intel PCH temperature values in thermal sensors
-
12:43 PM Todo #14027 (Resolved): Update PHP to 8.2.6
- Nothing that I know of.
-
10:58 AM Bug #14167 (Confirmed): Auto Config Backup: Selected manual backups are not retained.
- It's entirely on the backend in ACB.
-
10:42 AM Bug #14167: Auto Config Backup: Selected manual backups are not retained.
- Does anything even need to change on the frontend here? It seems like the client side is doing all it can and the bac...
-
10:43 AM Regression #14217: IPsec Phase 2 rekey failures with some PFS key groups
- Updating subject for release notes.
-
10:30 AM Bug #13655 (Feedback): DNS Forwarder (``dnsmasq``) is using an invalid combination of options when "Query DNS servers sequentially" is enabled
- Applied in changeset commit:f48271e08f81c560bf70107c76e9caf3311042be.
-
10:21 AM Bug #13655 (In Progress): DNS Forwarder (``dnsmasq``) is using an invalid combination of options when "Query DNS servers sequentially" is enabled
- Moving that to an @else@ clause is ideal for now since they should be mutually exclusive.
-
10:20 AM Bug #13908 (Feedback): Firewall rules are not reloaded when removing a VIP, outdated rules/entries remain active
- Applied in changeset commit:e90ba648cf5256dffbc9294bb6318c899db21f88.
-
07:43 AM pfSense Packages Bug #14258: HA-proxy, IPV6-address in combination with portnumber => fatal
- Attached a picture from another situation where the IPV6-addresses are not properly extracted / handover from the GUI...
-
07:21 AM pfSense Packages Bug #13969 (Resolved): Status_Monitoring ignores NAT states
- Tested on 23.05-DEV (built on Fri Apr 07 01:20:44 UTC 2023) and on 2.7-DEV (built on Wed Apr 12 06:05:24 UTC 2023)
... -
07:10 AM Regression #13966 (Resolved): RRD update script does not parse state data properly
- Tested on 23.01 and on 23.05-DEV (built on Fri Apr 07 01:20:44 UTC 2023) and on 2.7-DEV (built on Wed Apr 12 06:05:24...
-
06:38 AM pfSense Plus Bug #13976: SNMP logs "Device not configured" error message when queries involve built-in switch port interfaces
- I have the same on my Netgate 7100. Hope there is a fix soon because this **** is flooding mit logs :/
-
05:44 AM pfSense Packages Bug #14199: ACME - Issue with corrupted cert
- Attached PHP error log
-
04:22 AM Todo #14188 (Resolved): Add note to inform the user that the "Next Certificate Serial" value is ignored when the "Randomize Serial" option is enabled
- Tested on 2.7 (built on Tue Apr 11 06:05:40 UTC 2023) and on 23.05 (built on Fri Apr 07 01:20:44 UTC 2023)
Both DE...
04/11/2023
-
10:45 PM pfSense Packages Bug #14271 (Not a Bug): WireGuard does not work
- Just for future reference these types of issues are best addressed first on the Forums before opening a Redmine issue...
-
10:36 PM pfSense Packages Bug #14271: WireGuard does not work
- It's working, thanks!
-
10:20 PM pfSense Packages Bug #14271: WireGuard does not work
- Did you enable WireGuard on the settings page?
-
09:52 PM pfSense Packages Bug #14271: WireGuard does not work
- WireGuard0.1.6_2
!clipboard-202304121052-budas.png!
-
09:51 PM pfSense Packages Bug #14271 (Not a Bug): WireGuard does not work
- My WireGuard does not have a start/restart button after installation.
After going to the WireGuard configuration pag... -
07:24 PM Revision b959ca07: Trim whitespace from static addrs on save. Fixes #13959
-
07:19 PM Revision 9d6220c6: Remove sleep from Do Not Wait for RA code path. Fixes #13492
- The purpose of the sleep was never documented as far back as I could
tell, and it appears to cause more harm than goo... -
05:15 PM Feature #14255: Support for Intel PCH temperature values in thermal sensors
- Additionally add user configurable limits for PCH data.
https://gitlab.netgate.com/pfSense/pfSense/-/merge_reques... -
04:40 PM Bug #14270 (New): Default domain is not used in IPsec Split DNS
- The Split-DNS GUI option has the description:
> NOTE: If left blank, and a default domain is set, it will be used fo... -
04:38 PM Feature #7773 (Closed): IPSec using IKEv2 with split DNS not using provided domain names
- This should be resolved with https://redmine.pfsense.org/issues/12975.
-
03:29 PM Revision fbf8f9e8: Multiple issues with ICMP NAT/Rules. Fixes #14267
- * When making an associated firewall rule for a port forward, do not
craft what would be an invalid port range.
* W... -
02:51 PM Bug #14262: IPv6 firewall log entries do not wrap and force the table width past the width of the page
- If someone else wants to experiment, this is what I started with to insert the wbr and change the wrapping:...
-
02:49 PM Bug #14262: IPv6 firewall log entries do not wrap and force the table width past the width of the page
- There is much more to it than the wbr tags. The src/dst cells are locked at nowrap, as it the row itself. The descrip...
-
02:34 PM Revision 854a454c: Additional changes to new Packet Capture GUI. Implements #13382
-
02:30 PM Todo #13959 (Feedback): Trim blank characters from static IP address fields on the Interface configuration page
- Applied in changeset commit:b959ca071e503e59f6f361d411b0bc62a12d5821.
-
02:27 PM Todo #13959: Trim blank characters from static IP address fields on the Interface configuration page
- For whatever reason, is_ipaddrv4() rejects the address when it has extra blank space but the IPv6 version does not. I...
-
02:30 PM Todo #13492 (Feedback): Start ``rtsold`` immediately after ``dhcp6c`` sends a request
- Applied in changeset commit:9d6220c62a2a9633451d4ee04ca56ee1a013efc4.
-
02:21 PM Todo #13701: Replace direct config accesses for the rest of the paths in ``system_advanced_admin.inc``
- Err, sorry, 48eab661
-
02:19 PM Todo #13701 (Resolved): Replace direct config accesses for the rest of the paths in ``system_advanced_admin.inc``
- This was committed in 9c2b9b78
-
02:17 PM Todo #13702 (Resolved): Replace direct config accesses in ``system_advanced_sysctl``
- This work was committed in 48eab661
-
12:45 PM Bug #14257: Rule order interface group 'is uncontrolled changing ^up and down^' :(
- FWIW I've noticed the rule separators moving down one position when at the top. I haven't been able to reproduce this...
-
12:08 PM Bug #14257: Rule order interface group 'is uncontrolled changing ^up and down^' :(
- Not only the rules are moving, also the separators are moving up and down.
-
12:20 PM Bug #14035 (Feedback): PHP error when attempting to create a GIF interface when ``if_gif`` kernel module is not loaded
- This is going to have to wait unless someone can find a way to reproduce it reliably since I still am unable to repli...
-
12:03 PM Bug #12673: Firewall Logs Dashboard Widget is slow and may fail to update
- Can you submit the proposed changes as a pull request on Github?
https://docs.netgate.com/pfsense/en/latest/develo... -
12:01 PM Bug #3132: Gateway events for IPv6 affect IPv4 services and vice versa
- Doesn't look likely that we'll have time to finish this for 23.05. Moving forward to the next release target.
-
11:57 AM Feature #13362: Update dynamic gateway consumers when their interface is renamed
- Doesn't look likely that we'll have time to finish this for 23.05. Moving forward to the next release target.
-
11:56 AM Feature #6960: Introduce Kea DHCP as an alternative DHCP server for IPv4 and IPv6
- Doesn't look likely that we'll have time to finish this for 23.05. Moving forward to the next release target.
-
11:55 AM Feature #14122: Allow selecting the repo branch on config restore
- Doesn't look likely that we'll have time to finish this for 23.05. Moving forward to the next release target.
-
11:55 AM Feature #14166: Use netstat output for interface packet counters
- Doesn't look likely that we'll have time to finish this for 23.05. Moving forward to the next release target.
-
11:52 AM Todo #14027: Update PHP to 8.2.6
- Is there anything holding this back from being closed? It's been in snapshots for a while now and running well.
-
11:51 AM pfSense Packages Bug #14096 (Resolved): Status_Traffic_Totals does not work on snapshots due to sqlite change
- This apparently was fixed upstream and we brought it in during a recent ports merge. It's working on current snapshot...
-
10:54 AM Bug #13915: PHP errors when re-running Traffic Shaper Wizards with different settings
- I also "volunteer" to test something.
-
10:35 AM Regression #14267 (Feedback): PHP error when saving an ICMP firewall rule with no subtypes selected
- Applied in changeset commit:fbf8f9e8be74a4c40af1d33cc15bc7d228676eb4.
-
07:40 AM Regression #14267 (Confirmed): PHP error when saving an ICMP firewall rule with no subtypes selected
- A couple notes:
* The error happens when trying to save, not when loading the page
* The error is specific to ICMP
*... -
10:34 AM Regression #13350: SSL/TLS OpenVPN Client fails with ``ifconfig`` error when the IPv4 Tunnel Network is defined
- There are more errors from this same case over on #14268 -- but this appears to be with DCO where the errors on #1426...
-
10:33 AM Regression #14268 (Duplicate): OpenVPN client fails to start when a tunnel network is specified
- We can count this one a duplicate since it appears to be the same root issue.
I still haven't seen a good way to k... -
10:15 AM Regression #14268: OpenVPN client fails to start when a tunnel network is specified
- I have not seen a case yet where the tunnel network needed to be specified. Regarding #13350, that's the error I get ...
-
07:20 AM Regression #14268 (Feedback): OpenVPN client fails to start when a tunnel network is specified
- Are you certain that setup needs a tunnel network in the client? We have seen cases like #13350 where it was set impr...
-
09:57 AM pfSense Plus Regression #13993 (Resolved): Switch ports on 7100/1100/2100 do not have Auto MDI-X support enabled
- This is fixed in current snapshots. The switch ports link MDI and MDIX as expected.
The other issues reported here... -
09:40 AM Feature #13382 (Feedback): Packet Capture GUI with granular control
- Applied in changeset commit:854a454c4ba5aaaabab98ddb657f775a1745094d.
-
08:14 AM Todo #14201 (Resolved): Remove deprecated NCP enable/disable toggle from OpenVPN
- Tested on 2.7-DEV (built on Tue Apr 11 06:05:40 UTC 2023)
There is no 'NCP enable/disable' option for OpenVPN Serv... -
07:58 AM pfSense Plus Regression #14269 (Duplicate): 1100/2100: switch ports not enabled for auto-mdi-x
- Fix appears to be in and working for me as well. I get a link between the LAN and OPT ports on an 1100 running a 23.0...
-
07:50 AM pfSense Plus Regression #14269 (Feedback): 1100/2100: switch ports not enabled for auto-mdi-x
- The same fix that applied to the 7100 is already in 23.05 snapshots. The switch ports link MDI and MDIX there as expe...
-
04:15 AM pfSense Plus Regression #14269: 1100/2100: switch ports not enabled for auto-mdi-x
- aleksei prokofiev wrote:
> In 23.01 the 1100 switch ports do not support auto-MDI/X. The customer try to connect 110... -
03:51 AM pfSense Plus Regression #14269 (Duplicate): 1100/2100: switch ports not enabled for auto-mdi-x
- In 23.01 the 1100 switch ports do not support auto-MDI/X. The customer try to connect 1100 with 2100 and no success, ...
04/10/2023
-
09:10 PM Regression #14268 (Duplicate): OpenVPN client fails to start when a tunnel network is specified
- Tested on pfSense+ 23.01/23.05dev with and without DCO.
With non-DCO, the logs show that it fails to configure the... -
08:10 PM Regression #14267 (Resolved): PHP error when saving an ICMP firewall rule with no subtypes selected
- pfSense+ 23.01
Trying to edit an auto-generated NAT-associated firewall rule to allow ICMP results in a PHP error:... -
04:04 PM Feature #13382 (Pull Request Review): Packet Capture GUI with granular control
- https://gitlab.netgate.com/pfSense/pfSense/-/merge_requests/1025
* Moved custom filter option to the first position ... -
03:56 PM Revision 02af3d3e: Normalize IPv6 prefix prior to use in ip_in_subnet(). Fixes #14256
-
02:58 PM pfSense Packages Bug #14228: pfBlockerNG might not support new Maxmind license keys
- This was fixed in the 3.2.0_4 which is live.
- 02:04 PM Revision aa3bbcb4: Add PCH thermal data to the thermal sensors widget and RRD graphs. Implements #14255
-
01:40 PM Revision 4dc0624a: Fix punctuation. Fixes #14188
-
01:11 PM Revision 4b34ebd2: Update fw host/domain description text and add to wizard. Fixes #14250
- * Update firewall host/domain description text
* Use same description on system.php and setup wizard -
01:05 PM Bug #11494: Wireguard interface sends ICMP Redirect when routing between two peers
- Christian McDonald wrote in #note-9:
> Unable to replicate.
>
> We can revisit if someone can demonstrate that th... -
11:54 AM Bug #14266 (Rejected): Bug Captive Portal first access URL in HTTPS
- As I mentioned on the other issue you opened (#14263), there isn't anything else you can do here.
There is no way ... -
11:41 AM Bug #14266 (Rejected): Bug Captive Portal first access URL in HTTPS
- Good afternoon,
I'm using version 2.6 of the system, I tried this week to increase the use of the captive portal ... -
11:05 AM Bug #14256 (Feedback): PHP Error performing IPv6 ``ip_in_subnet()`` when passing a host addresses within prefix
- Applied in changeset commit:02af3d3efedacf511ebe834667fa7c707b46b43c.
-
08:44 AM Bug #14256: PHP Error performing IPv6 ``ip_in_subnet()`` when passing a host addresses within prefix
- We've seen this pop up in a couple different places so I'll see if there is a way to fix it more generally. The gist ...
-
10:36 AM pfSense Docs Correction #14253 (Rejected): Single User Mode - Next Boot Configuration MUST manually be cleared on 3100
- Looking this over, there is nowhere in the code that offers to reboot a 3100 in a way that would land a user in this ...
-
10:10 AM Feature #14265 (Resolved): Option to invalidate GUI login session if the client address changes
- Currently once the user logs in, their session is valid even if the client source address changes. This allows the us...
-
10:01 AM Todo #14264 (New): Consider lowering default session timeout from current default of four hours (240m)
- The current session timeout is 240 minutes (four hours), but it might be time to lower that a bit. Current concerns w...
-
09:20 AM Bug #14263 (Rejected): Bug Captive Portal quando Pagina é HTTPS
- 1. We are only able to accept reports in English.
2. After running that through Google Translate it's about HTTPS ... -
06:24 AM Bug #14263 (Rejected): Bug Captive Portal quando Pagina é HTTPS
- Bom dia, estou usando a versão 2.6 do sistema, tentei nesta semana incrementar o uso do captive portal em meu cenário...
-
09:14 AM Bug #14262: IPv6 firewall log entries do not wrap and force the table width past the width of the page
- We solved this in the widget in #5332 by adding @<wbr>@ tags after each @:@ in an IPv6 address but it looks like that...
-
01:53 AM Bug #14262 (New): IPv6 firewall log entries do not wrap and force the table width past the width of the page
- IPV6-addresses are much wider than IPV4. That is not properly handled in the GUI. Extreme example is the Firewall log...
-
09:10 AM Feature #14255 (Feedback): Support for Intel PCH temperature values in thermal sensors
- Applied in changeset commit:aa3bbcb4c1fd5f563cdba707887b17c5088ad7b9.
-
08:59 AM pfSense Packages Todo #14194: Better colours for alerts
- Sergei Shablovsky wrote in #note-2:
> Jim Pingle wrote in #note-1:
> > Green and Red are also not great choices bec... -
08:52 AM Bug #13996 (New): Limiters using the fq_pie scheduler no longer pass any traffic.
-
08:52 AM pfSense Plus Bug #14259 (Duplicate): Limiters with the fq_pie scheduler don't pass any traffic.
- Duplicate of #13996 -- let's keep all the discussion on there.
-
08:50 AM Todo #14188 (Feedback): Add note to inform the user that the "Next Certificate Serial" value is ignored when the "Randomize Serial" option is enabled
- Applied in changeset commit:4dc0624a1ab562736cf6236a81a0489f8ba35afc.
-
08:49 AM Bug #14257 (Rejected): Rule order interface group 'is uncontrolled changing ^up and down^' :(
- I can't reproduce this. The only way the rules would appear to reorder themselves is if they were not saved.
There... -
08:48 AM Todo #14011: Update memory graphs to account for changes in memory reporting
- Because the "cache" value is a dummy in the FreeBSD sysctl tree now I used "cache" on the graph for ZFS ARC (when usi...
-
08:40 AM Todo #14250 (Feedback): Update firewall host and domain fields in the Setup Wizard to match the description and warning text from ``system.php``
- Applied in changeset commit:4b34ebd23dbe29b544727e8ab2727135b03f6110.
-
08:35 AM Feature #14254 (Rejected): Add option "Reboot with Filesystem Check" to the Diagnostics > Reboot page for Netgate 3100
- We cannot add this because as you noted on #14253 it cannot be cleared automatically on 3100.
We only add the opti... -
08:33 AM Feature #14251 (Duplicate): Add option to disable Intel Speed Shift so that Intel Speed Step can kick in
- Duplicate of #14047
-
07:44 AM Feature #14249: Pre-set search string for DHCP leases when following shortcut link from DHCP configuration
- Your description isn't very clear on what you are asking for. I can only assume you're asking that if you follow a li...
-
07:34 AM pfSense Packages Bug #14218 (Feedback): Deleting a shellcmd entry results in a PHP error and crash report
- MR merged
-
07:28 AM Bug #14248 (Feedback): Static routes to monitor IP disappears if you set a gateway group as a default gateway.
- If anyone can reproduce this starting with a completely fresh stock configuration, we'll need the steps involved to m...
-
07:26 AM Bug #14247 (Duplicate): IPsec code needs updated to the new accessor methods.
- Duplicate of #14009
-
05:47 AM Bug #13671 (Resolved): DHCP client can fail permanently if an interface is down at boot
- Tested on 23.01
I was able to reproduce this Bug on my KVM by turning WAN (DHCP) interface off at certain moment d... -
01:45 AM Bug #14261 (Closed): Trim white space in a DHCP Leases page search field
- Hi!
On DHCP Leases status page, in Search section, in Search term field BEFORE displaying results in Leases table ...
04/09/2023
-
05:19 PM Todo #14260: Change “IP[:PORT]” to “IP / FQDN[:PORT]
- Hi!
In System Logs -> Settings page in Remote Log Servers section:
Change “IP[:PORT]” to “FQDN or IP [:PORT] in... -
05:18 PM Todo #14260 (New): Change “IP[:PORT]” to “IP / FQDN[:PORT]
- Hi!
In System Logs -> Settings page in Remote Log Servers section:
Change “IP[:PORT]” to “FQDN or IP [:PORT] in... -
04:22 PM pfSense Packages Feature #13195: Dedicated website for Feed mangement - Community Driven
- Jon Brown wrote in #note-1:
> or the website could be website where end users (me and others) can add feeds and repo... -
04:18 PM pfSense Docs New Content #14174: Feedback on Certificate Management — Certificate Authority Management
- Jon Brown wrote in #note-2:
> see https://forum.netgate.com/topic/179007/add-this-certificate-authority-to-the-opera... -
04:03 PM pfSense Packages Todo #14194: Better colours for alerts
- Jim Pingle wrote in #note-1:
> Green and Red are also not great choices because some people are red/green color blin... -
02:25 PM pfSense Plus Bug #14259 (Duplicate): Limiters with the fq_pie scheduler don't pass any traffic.
- After updating to 23.01 limiters using the fq_pie scheduler don't pass any traffic.
I'm using floating rules to as... -
01:32 PM Feature #14255 (Pull Request Review): Support for Intel PCH temperature values in thermal sensors
-
01:31 PM Feature #14255: Support for Intel PCH temperature values in thermal sensors
- This looks to cover it: https://gitlab.netgate.com/pfSense/pfSense/-/merge_requests/1024
-
08:07 AM Feature #14255 (Resolved): Support for Intel PCH temperature values in thermal sensors
- In pfSense 23.01/2.7 the pchtherm(4) driver is included and attaches to supported chipsets:...
-
01:27 PM pfSense Packages Bug #14258 (New): HA-proxy, IPV6-address in combination with portnumber => fatal
- I am setting up HA-proxy using IPV4 and IPV6. When trying to define an IPV6 frontend, there is a prolbem
When e.g.... -
12:28 PM Bug #14257 (Rejected): Rule order interface group 'is uncontrolled changing ^up and down^' :(
- I did create an interface group. For that group I am defining new rules and I am moving rules from the 'interface gro...
-
10:13 AM Todo #14011: Update memory graphs to account for changes in memory reporting
- If cache is now always 0 why is it 28.8%?...
-
09:50 AM Todo #14186: Improve DynDNS help text readability
- Chris Linstruth wrote in #note-4:
> Looks good to me. @Bojan Bogojevic should probably weigh in to see if it is what ... -
07:57 AM Todo #14186: Improve DynDNS help text readability
- Looks good to me. @Bojan Bogojevic should probably weigh in to see if it is what was desired.
-
09:26 AM Bug #14256 (Resolved): PHP Error performing IPv6 ``ip_in_subnet()`` when passing a host addresses within prefix
- I am getting this PHP error:...
-
09:01 AM Todo #14188 (In Progress): Add note to inform the user that the "Next Certificate Serial" value is ignored when the "Randomize Serial" option is enabled
- Consistency says that "This value is ignored when Randomize Serial is checked" should be terminated with a period.
... -
04:16 AM Feature #14254 (Rejected): Add option "Reboot with Filesystem Check" to the Diagnostics > Reboot page for Netgate 3100
- I'd simply like to request that the "Reboot with Filesystem Check" option (mentioned in the documentation on the "Tro...
-
04:11 AM pfSense Packages Bug #14228: pfBlockerNG might not support new Maxmind license keys
- I can confirm this issue.
I used a workaround on Reddit and it worked.
https://www.reddit.com/r/pfBlockerNG/comment... -
04:00 AM pfSense Docs Correction #14253 (Rejected): Single User Mode - Next Boot Configuration MUST manually be cleared on 3100
- https://docs.netgate.com/pfsense/en/latest/troubleshooting/single-user-mode.html#entering-single-user-mode
The doc... -
02:50 AM pfSense Plus Feature #14252 (New): Optimization for 10GB-Connection/Throughput
- Tuning a 10GB Connection, i´ve spent many days to get the most performance out of pfSense.
I´ve found the followin... -
02:37 AM Feature #14251 (Duplicate): Add option to disable Intel Speed Shift so that Intel Speed Step can kick in
- My problem was, that in the boot logs pfSense did detect and use Intel SpeedShift.
As i have an i3-7100 CPU which, s... -
12:22 AM Bug #14236: PHP Error when viewing Traffic Graphs in ``iftop`` mode
- I can’t reproduce issue...
-
12:20 AM Bug #14248: Static routes to monitor IP disappears if you set a gateway group as a default gateway.
- I can't reproduce it...
04/08/2023
-
09:30 PM Todo #14250 (Resolved): Update firewall host and domain fields in the Setup Wizard to match the description and warning text from ``system.php``
- The setup wizard should give the same warning about using the .local domain as the System > General configuration tex...
-
08:48 PM Feature #14249 (New): Pre-set search string for DHCP leases when following shortcut link from DHCP configuration
- Hi pfSense DevTeam!
When configuring DHCP Server in WebGUI, pressing on “Show DHCP Leases” logically may cause to ... -
08:36 PM pfSense Packages Todo #14073 (Confirmed): Shalla block list is offline but still available in pfBlocker
- Confirmed in 23.01 and 2.7:
UPDATE PROCESS START [ v3.2.0_4 ] [ 04/9/23 01:34:56 ]
===[ DNSBL Process ]=====... -
08:28 PM pfSense Packages Bug #14021 (Incomplete): Squid ClamAV showing bytecode errors for version 334
- Unable to confirm this. Here are my logs:
ClamAV - freshclam Logs
Message
bytecode.cvd database is up-to-date (v... -
08:25 PM pfSense Packages Bug #14108 (Confirmed): Antivirus Bases showing outdated main.cvd with a version dated year 2021
- This doesn't appear to be a bug with the file not being downloaded. The file at http://database.clamav.net/main.cvd ...
-
08:09 PM pfSense Packages Bug #14228 (Confirmed): pfBlockerNG might not support new Maxmind license keys
- I can confirm this behavior in 3.2.0_3 on 23.01 of pfSense Plus.
-
04:12 PM Feature #14185 (Resolved): Ability to edit Certificate Revocation List properties
added
2.7.0-DEVELOPMENT (amd64)
built on Fri Apr 07 06:05:50 UTC 2023
FreeBSD 14.0-CURRENT
-
01:09 PM Bug #14248: Static routes to monitor IP disappears if you set a gateway group as a default gateway.
- I couldn't reproduce it on:...
-
05:32 AM Bug #14248 (Feedback): Static routes to monitor IP disappears if you set a gateway group as a default gateway.
- Tested on 23.01.
Steps to reproduce:
Set the monitor IP on each gateway
Create a gateway group Tier1 Tier2
Set ... -
12:26 PM pfSense Plus Regression #13993: Switch ports on 7100/1100/2100 do not have Auto MDI-X support enabled
- Successfully linked 7100 to 1100 both on 23.05.a.20230407.0116
Switches are back in the interfaces menu on 7100 @ 23... -
08:18 AM pfSense Plus Regression #13993: Switch ports on 7100/1100/2100 do not have Auto MDI-X support enabled
- That's this netlink issue: https://redmine.pfsense.org/issues/14233
-
04:44 AM pfSense Plus Regression #13993: Switch ports on 7100/1100/2100 do not have Auto MDI-X support enabled
- Tested against 23.05.a.20230405.0600
The switch gets detected correctly and can negotiate the link with SG-1100 an... -
12:19 PM Bug #14236: PHP Error when viewing Traffic Graphs in ``iftop`` mode
- Applied above changeset via patches package, running 23.05.a.20230407.0116; when viewing traffic graphs, selecting if...
04/07/2023
-
06:02 PM pfSense Packages Regression #14024: PHP error in HAProxy Widget with Show Client Traffic enabled
- Sebastian Wagner wrote in #note-7:
> As a workaround, I change the file like this:
> [...]
> I don't know if the d... -
05:46 PM Bug #14247 (Duplicate): IPsec code needs updated to the new accessor methods.
- There are some errors caused by the removal of deprecated encryption methods. Updating to the new methods would fix t...
-
05:00 PM Bug #14246 (New): Old OpenVPN anchor rules not clearing
- Anchor rules also seem to be created in duplicate, but cause no apparent problems. However, it can sometimes overlap ...
-
04:18 PM Revision 2eb25975: Cast to float in format_number(). Fixes #14236
-
02:50 PM Bug #14244 (New): ``get_interface_list()`` in ``util.inc`` does not always match the expected device in ``dmesg``.
- In source:src/etc/inc/util.inc#L1730 the @get_interface_list()@ function finds a line based on the interface name, bu...
-
02:10 PM Bug #14236: PHP Error when viewing Traffic Graphs in ``iftop`` mode
- The original reporter on the forum states that the patch appears to have fixed the problem. Data still displays prope...
-
11:25 AM Bug #14236 (Feedback): PHP Error when viewing Traffic Graphs in ``iftop`` mode
- Applied in changeset commit:2eb25975691c95ea86c0df0a60c16bb9a70d4067.
-
11:18 AM Bug #14236 (In Progress): PHP Error when viewing Traffic Graphs in ``iftop`` mode
- I haven't managed to reproduce this yet but I can see how it might happen.
I've got a fix ready, and it seems to a... -
01:27 PM pfSense Packages Bug #14240 (Not a Bug): FRR OSPF Neighbor Not Detected for VTI Tunnels
- It may have worked by accident, but it wasn't supposed to have worked that way. The interfaces were only intended to ...
-
01:12 PM pfSense Packages Bug #14240 (New): FRR OSPF Neighbor Not Detected for VTI Tunnels
- Jim Pingle wrote in #note-4:
> Can't reproduce this, it's working fine here as it has for quite some time. Even on 23... -
10:36 AM pfSense Packages Bug #14240 (Not a Bug): FRR OSPF Neighbor Not Detected for VTI Tunnels
- Can't reproduce this, it's working fine here as it has for quite some time. Even on 23.05 snapshots. Has to be a conf...
-
12:18 PM pfSense Plus Bug #14243 (Not a Bug): PFSENSE 23.01
- This site is not for support or diagnostic discussion.
For assistance in solving problems, please post on the "Net... -
12:17 PM pfSense Plus Bug #14243 (Not a Bug): PFSENSE 23.01
- activating dns over tls following this tuto
https://docs.netgate.com/pfsense/en/latest/recipes/dns-over-tls.html
br... -
11:40 AM pfSense Plus Regression #14102 (New): Console menu incorrectly shows option ``99`` on some ARMv7/ARM64 installations
- Hate to be the bearer of bad news but I still see option 99 offered on my 1100. It's running ZFS, not UFS, so there i...
-
10:02 AM pfSense Packages Feature #14241 (New): The Abiility to Configure FreeRadius Proxy servers from the GUI
- Currently adding radius proxy servers via the GUI is not supported. When a proxy listener is configured freeradius st...
-
02:49 AM pfSense Plus Bug #14175: LDAP authentication for SSH fails
- The same on 2.6...
-
01:51 AM pfSense Plus Bug #14175: LDAP authentication for SSH fails
- Tested on 2.5.1 and get the same auth error on an attempt to SSH....
-
01:39 AM pfSense Plus Regression #14137: pfSense Plus Upgrade repo data remains on the system after upgradng
- Tyler Sparrow wrote in #note-4:
> aleksei prokofiev wrote in #note-1:
> > Also, if package manager unavailable, may...
04/06/2023
-
10:09 PM pfSense Packages Bug #14240: FRR OSPF Neighbor Not Detected for VTI Tunnels
to work around it (tested)
Add an IP(VIP) to the Localhost Firewall>Virtual IPs. (both sides, non used IPs)
ad...-
09:41 PM pfSense Packages Bug #14240: FRR OSPF Neighbor Not Detected for VTI Tunnels
- Additional troubleshooting:
We re-saved the interfaces, restarted the FRR Zebra and OSPF service several times, dr... -
09:40 PM pfSense Packages Bug #14240 (Not a Bug): FRR OSPF Neighbor Not Detected for VTI Tunnels
- Customer upgraded from 22.05 to 23.01 and FRR no longer showed a neighbor for a VTI tunnel with a /30 to an OSPF neig...
-
10:08 PM Feature #14238: Feature request: Single pane patch/package/release update notification and management
- !clipboard-202304062307-nsdpa.png!
!clipboard-202304062308-vwjvm.png!
-
10:04 PM Feature #14238: Feature request: Single pane patch/package/release update notification and management
- What packages widget? is this something available outside of 2.6?
I do not see a dashboard widget for neither syst... -
02:59 PM Feature #14238 (Rejected): Feature request: Single pane patch/package/release update notification and management
- There is a packages widget for package updates, and with that you can see everything on the dashboard already.
Sys... -
02:44 PM Feature #14238 (Rejected): Feature request: Single pane patch/package/release update notification and management
- Currently, PFSense has 3 different locations you need to check for updates and they don't generate any kinds of alert...
-
09:36 PM pfSense Docs New Content #14239 (Closed): Feedback on Packages — Nut package
- *Page:* https://docs.netgate.com/pfsense/en/latest/packages/nut.html
*Feedback:*
A restart of pfsense after con... -
12:10 PM pfSense Packages Bug #14199: ACME - Issue with corrupted cert
- I'm running pfSense+ 23.01 on a Netgate 2100.
This morning I was removing HAProxy (I've migrated to Nginx Proxy Ma... -
11:23 AM pfSense Packages Regression #14024: PHP error in HAProxy Widget with Show Client Traffic enabled
- As a workaround, I change the file like this:...
-
10:12 AM pfSense Plus Regression #14181: ``mmcsd0`` controller timeout/system hang on 1100
- For what it's worth I still have not seen a timeout again on mine, but I've been running 23.05 snapshots. It's been u...
-
09:51 AM Bug #14216: ntopng causes OpenVPN server errors 'error - IP packet with unknown IP version=15 seen' when OpenVPN server interface is selected
- Fresh install 2.6.0-RELEASE (amd64) with current packages.
ntopng net 0.8.13_10
There are other installed package... -
09:14 AM pfSense Plus Regression #14137: pfSense Plus Upgrade repo data remains on the system after upgradng
- aleksei prokofiev wrote in #note-1:
> Also, if package manager unavailable, may help next solution
> Check and then...
04/05/2023
-
06:25 PM Feature #13382 (In Progress): Packet Capture GUI with granular control
-
10:11 AM Feature #13382 (New): Packet Capture GUI with granular control
- Spent a couple minutes with the new page and hit a few snags:
* It's kind of confusing having none of the filterin... -
04:05 PM Bug #14237 (Not a Bug): Intermittent packet loss related to DHCP with Multi-WAN
- I'm sorry for somewhat vague description, there might be actually a few issues here, described one the forum: https:/...
-
02:58 PM pfSense Docs Todo #12268 (Closed): Update Aliases documentation with recently added features
- Updated: https://gitlab.netgate.com/docs/pfSense-docs/-/commit/fa5dee2856a3a8db3c269a750c080038f5c775cf
-
02:38 PM Bug #14236 (Resolved): PHP Error when viewing Traffic Graphs in ``iftop`` mode
- When monitoring traffic graphs which use iftop....
-
10:59 AM pfSense Plus Regression #14235 (Feedback): Undersized CESA TDMA descriptor pools can be exhausted, leading to errors
- fixed https://gitlab.netgate.com/pfSense/FreeBSD-src/-/commit/a483d9cdb658426f55e5cce61ef1fed17d97bddc
-
07:31 AM pfSense Plus Regression #14235 (Resolved): Undersized CESA TDMA descriptor pools can be exhausted, leading to errors
- When using CESA in the 3100 in 23.01 the descriptor pools can be exhausted filling the logs with:...
-
10:01 AM Feature #14047: Options to control Intel Speed Shift
- This affected myself, on my newly built appliance the gui displayed Intel(R) Celeron(R) N5105 @ 2.00GHz
Current: 260... -
06:37 AM Bug #13973 (Resolved): PHP error in ``gwlb.inc`` when OpenVPN or IPsec instances referred to by assigned interface entries are missing
- I was able to replicate the issue by manually removing the OpenVPN server from the XML backup config file but leaving...
-
04:10 AM Bug #14216: ntopng causes OpenVPN server errors 'error - IP packet with unknown IP version=15 seen' when OpenVPN server interface is selected
- I couldn't reproduce this issue on the 23.01 pfSense Plus release....
-
12:45 AM pfSense Packages Feature #12889: FRR GUI add set ipv6 next-hop global
- !https://i.imgur.com/ewwRoTm.jpg!
04/04/2023
-
09:41 PM Feature #13322 (Closed): Define Packet Capture Protocol
-
09:37 PM Feature #13322 (Resolved): Define Packet Capture Protocol
-
09:40 PM Feature #13094 (Closed): Allow packet capture filtering in tagged packets
-
09:37 PM Feature #13094 (Resolved): Allow packet capture filtering in tagged packets
-
09:40 PM Feature #13411 (Closed): Packet capture does not support 6rd tunnels
-
09:38 PM Feature #13411 (Resolved): Packet capture does not support 6rd tunnels
-
09:40 PM Feature #13682 (Closed): Automatically indicate a packet capture has stopped when count limit is reached
-
09:39 PM Feature #13682 (Resolved): Automatically indicate a packet capture has stopped when count limit is reached
- The button now reverts appropriately.
-
09:40 PM Feature #13017 (Closed): Packet capture: add preview results while capture is running
-
09:24 PM pfSense Docs Todo #14234 (Pull Request Review): Update Packet Capture docs to reflect the new GUI
- https://gitlab.netgate.com/docs/pfSense-docs/-/merge_requests/56
-
09:23 PM pfSense Docs Todo #14234 (Resolved): Update Packet Capture docs to reflect the new GUI
- The re-worked packet capture page has changes that need to be reflected on the docs.
-
07:49 PM Bug #13911: Unnecessary delay when querying ``ixgbe(4)`` interfaces with SFP ports
- Looks like it may not be fixed anytime soon. We have moved from 22.05 to 23.01 and it's still happening. I compared t...
-
07:36 PM Revision c016fea0: More flexible packet capture GUI. Implement #13382
-
04:08 PM Feature #13382: Packet Capture GUI with granular control
- We are going to need updated docs and a better subject line for release notes.
-
02:45 PM Feature #13382 (Feedback): Packet Capture GUI with granular control
- Applied in changeset commit:c016fea0222b8ebcb74c07ae5891da4c0fd65dee.
-
04:07 PM Feature #13868 (Closed): Allow packet capture on unassigned interfaces
- Superseded by #13382. Marking this as closed.
-
03:45 PM Feature #3718: radvd - enhancement proposal: ability to advertise routes and some fixes - patches attached
- Finally did my homework to learn some github terminology and find out how to edit code and submit pull requests - yay...
-
02:48 PM Regression #14217: IPsec Phase 2 rekey failures with some PFS key groups
- Something else to consider, the package in FreeBSD gained two options between 22.05.x and 23.01:...
-
09:54 AM pfSense Docs Correction #14123 (Closed): DNS Rebinding pfsense documentation
- This should hopefully be more clear now.
I updated the text a bit, added more information, and corrected reference... -
07:12 AM pfSense Packages Regression #13958: Snort exits with signal 10 on arm32
- Mateusz Guzik wrote in #note-2:
> Hi Bill, that was me.
>
> What changed is that there was a compiler update and ... -
06:54 AM pfSense Packages Regression #13958: Snort exits with signal 10 on arm32
- Hi Bill, that was me.
What changed is that there was a compiler update and then it turned out some of the files *d...
04/03/2023
-
06:22 PM pfSense Plus Regression #14233 (Resolved): pfSense installer crashes on the 7100
- The pfSense installer in the 23.05 memstick-serial image crashes:...
-
04:46 PM pfSense Packages Regression #14232 (New): ntopng no longer tracks top talkers
- ntopng version that now comes with pfsnese plus 23.01 no longer tracks top talkers across time(no historical tracking...
-
02:28 PM pfSense Docs Todo #13968 (Closed): Marvell install instructions need updated
- Updated 3100 install docs:
* https://gitlab.netgate.com/docs/pfsense-platforms/-/commit/8436c947544820423b30faf01d4b... -
02:24 PM Revision 41d62bba: Composer update
-
01:56 PM pfSense Plus Regression #14137: pfSense Plus Upgrade repo data remains on the system after upgradng
- Danilo Zrenjanin wrote in #note-2:
> I hit that case and confirmed that the offered workaround fixes it.
I'm runn... -
01:01 PM pfSense Docs New Content #13941 (Feedback): Memory usage in pfSense
- This should take care of things:
https://gitlab.netgate.com/docs/pfSense-docs/-/commit/ab28c436fd6ff499ffec334dc1f... -
11:38 AM pfSense Packages Regression #14189 (New): pfBlocker-NG: HA-Sync is not working
-
10:29 AM pfSense Packages Regression #14189 (Duplicate): pfBlocker-NG: HA-Sync is not working
- This issue has existed for some time unfortunately. It's covered by the following reports:
https://redmine.pfsense.or... -
10:45 AM pfSense Packages Bug #12916: pfBlockerNG-devel cron job does not trigger xmlrpc sync
- Hello Marcos,
sadly this is not the same bug, because for me on pfSense+ 23.01 no update option worked, not even "... -
08:15 AM Todo #14183 (Resolved): Update OpenVPN Wizard to match current certificate and OpenVPN options
-
08:14 AM pfSense Packages Bug #14220 (Duplicate): pfBlockerNG does not sync to HA secondary
- Duplicate of #14189
-
08:11 AM pfSense Packages Bug #13936 (Feedback): PHP error from RRD Graphs when attempting a query a newly created empty database
- MR merged
-
08:00 AM Bug #14083 (New): Adding MSS and MTU values on a LAGG VLAN interface breaks connectivity
-
07:59 AM Bug #14083 (Duplicate): Adding MSS and MTU values on a LAGG VLAN interface breaks connectivity
-
07:57 AM pfSense Packages Feature #14193 (Duplicate): Website to add and remove feeds automatically
-
07:47 AM Todo #14231 (Rejected): Set net prefix to /24 by default when add new net
- /24 is not any more or less likely to be correct than any other value. It depends on what the user is doing there whi...
-
07:45 AM pfSense Plus Bug #14204 (Feedback): System Information Dashboard widget stops showing CPU details on aarch64
- MR merged.
04/02/2023
-
09:01 PM Todo #14231 (Rejected): Set net prefix to /24 by default when add new net
- Dear pfSense stuff:
In DNS Resolver ACL configuration page set net prefix to /24 by default when add new net.
(... -
03:21 PM pfSense Packages Bug #14230: PHP error with pfBlockerNG
- As a workaround, use the @System Patches@ package to apply the following patch (set @Path Strip Count@ to @0@)....
-
03:11 PM pfSense Packages Bug #14230 (New): PHP error with pfBlockerNG
- On @pfBlockerNG-3.2.0_3@ and @pfSense-23.01@....
-
11:33 AM Bug #13996: Limiters using the fq_pie scheduler no longer pass any traffic.
- I am not the only one with the problem: https://forum.netgate.com/topic/177555/fq_pie-no-internet?_=1680451711804
... -
10:52 AM Bug #14227 (Duplicate): Traffic Shaper - selected scheduler not recognized
-
12:17 AM Bug #14227: Traffic Shaper - selected scheduler not recognized
- looking at diagnostic>limiter info displays a limiter with tail drop/FIFO above the AQM/scheduler that are modifiable...
-
12:09 AM Bug #14227 (Duplicate): Traffic Shaper - selected scheduler not recognized
- Limiter created and enabled with a child queue enabled, both saved and applied. Make change and save parent limiter, ...
-
10:51 AM pfSense Packages Bug #14075 (Feedback): Using the ``Transparent ClientIP`` option in HAproxy results in kernel panics
- The original report was from a customer's system, however I have not been able to reproduce this either on 23.01 nor ...
-
10:13 AM pfSense Plus Bug #14224 (Duplicate): Error when deleting Boot Environment that was the source for a clone
-
06:54 AM pfSense Docs Todo #14225: Feedback on Packages — IDS / IPS — Configuring the Snort Package
- Should of added, there are 4 policies and *Max-Detect* is not mentioned on the help page
-
05:25 AM pfSense Docs Todo #14225: Feedback on Packages — IDS / IPS — Configuring the Snort Package
- this snort page lists the different policies but also gives a warning that the *Max-Detect* should only be used in te...
-
05:45 AM pfSense Docs Todo #14229: Snort - Add help page for SID MGMT
- Sticky topics - https://forum.netgate.com/category/53/ids-ips
-
05:43 AM pfSense Docs Todo #14229 (New): Snort - Add help page for SID MGMT
- there is no help page for
* https://x.x.x.x/help.php?page=snort/snort_sid_mgmt.php
* Services --> Snort --> SID M... -
03:43 AM pfSense Packages Bug #14228 (Resolved): pfBlockerNG might not support new Maxmind license keys
- https://dev.maxmind.com/geoip/release-notes/2023?lang=en#changes-to-maxmind-license-keys
* New license keys will b... -
03:08 AM pfSense Packages Feature #13195: Dedicated website for Feed mangement - Community Driven
- or the website could be website where end users (me and others) can add feeds and report dead feeds that would then b...
-
03:06 AM pfSense Packages Feature #14193: Website to add and remove feeds automatically
- duplicate of #13195 - close this one
04/01/2023
-
10:52 PM pfSense Docs Todo #14226 (New): Feedback on Packages — IDS / IPS — Configuring the Snort Package
- *Page:* https://docs.netgate.com/pfsense/en/latest/packages/snort/setup.html
*Feedback:* The docs seem to unnecess... -
08:58 PM Feature #13868: Allow packet capture on unassigned interfaces
- Danilo Zrenjanin wrote in #note-4:
> I tested the commit da2879b467746b43c8b8687700b6d7f34d4fd302 against the 22.05 ... -
08:49 PM pfSense Packages Todo #14221: Sync settings and inline documentation needs improving
- >>http is insecure because your password will be transmitted in plain text so use https
Not sure it's relevant to ... -
03:35 AM pfSense Packages Todo #14221 (New): Sync settings and inline documentation needs improving
- This inline notes on the sync page (Firewall --> pfBlockerNG --> Sync) need improving.
* *Add: Allow Sync Pushes*
... -
08:41 PM pfSense Plus Bug #14168: OpenVPN status GUI cannot display RADIUS ACL Generated Ruleset with usernames containing an ``@`` symbol
- Jim Pingle wrote in #note-1:
> Is this newly broken in 23.01 (regression) or has it never worked, even on older vers... -
08:36 PM pfSense Plus Bug #14224: Error when deleting Boot Environment that was the source for a clone
- Confirmed on 23.01. The boot environment deletes, but throws the error, so it appears to be cosmetic in nature, than...
-
12:14 PM pfSense Plus Bug #14224 (Duplicate): Error when deleting Boot Environment that was the source for a clone
- Steps to reproduce.
1. Navigate to System > Boot Environments
2. Create New Boot Environment
3. Clone that n... -
08:34 PM pfSense Packages Bug #14218: Deleting a shellcmd entry results in a PHP error and crash report
- A diff of the merge request fixes the problem when applied as a system patch. Deleting a shellcmd job doesn't give an...
-
10:08 AM pfSense Packages Bug #14218 (Pull Request Review): Deleting a shellcmd entry results in a PHP error and crash report
- https://gitlab.netgate.com/pfSense/FreeBSD-ports/-/merge_requests/334
-
03:20 PM Bug #13996 (Not a Bug): Limiters using the fq_pie scheduler no longer pass any traffic.
-
03:19 PM Bug #13996: Limiters using the fq_pie scheduler no longer pass any traffic.
- I'm unable to reproduce this on a virtual machine which was upgraded to 23.01 from 22.05 (and to 22.05 from 22.01 pre...
-
02:02 PM pfSense Docs Todo #14225 (New): Feedback on Packages — IDS / IPS — Configuring the Snort Package
- *Page:* https://docs.netgate.com/pfsense/en/latest/packages/snort/setup.html
*Feedback:*
the following statemen... -
01:55 PM pfSense Packages Bug #11477: FRR does not recognize some BFD options
not exist
frr 1.2_3
pfsense 23.01-
12:16 PM pfSense Plus Bug #14074 (Resolved): Cannot edit or delete ZFS Boot Environment with a name containing only numbers
- Did some more testing. The other error seems to be unrelated to this issue. I created another redmine to track it. ht...
-
11:17 AM pfSense Packages Bug #14223 (New): Block Offenders - Incorrect statement/description
- The description on the options 'Block Offenders' is incorrect for 'inline mode' but still valid for 'Legacy Mode'
... -
10:55 AM pfSense Packages Bug #14220: pfBlockerNG does not sync to HA secondary
- Apparently my search for "sync" wasn't good enough. Apologies for the dupe.
-
06:46 AM pfSense Packages Bug #14220: pfBlockerNG does not sync to HA secondary
- I alreay created a bug for it, see https://redmine.pfsense.org/issues/14189 .
No feedback yet, if someone is even ... -
07:08 AM Bug #14031: Identical SMTP notifications repeat in an infinite loop under certain conditions
- I can confirm the fix is working for me. I don't see any repeats anymore. Thanks Jim!
-
04:37 AM Feature #14222 (New): Add additional checks to admin account when disabling - Prevent lockouts
- Currently on a fresh copy of pfSense and only an admin account I am able to disable this 'admin' account. This is a p...
-
02:32 AM Todo #14183: Update OpenVPN Wizard to match current certificate and OpenVPN options
- Changeset tested on...
Also available in: Atom